@tangle-network/agent-integrations 0.58.0 → 0.59.1

package/dist/connectors/oauth.js

@@ -0,0 +1,282 @@
+import { createHash, randomBytes } from "crypto";
+//#region src/connectors/oauth.ts
+/**
+* Generic OAuth2 helper used by every oauth-shaped connector (Google
+* Calendar, Sheets, Drive, HubSpot, Salesforce, Zoom, ...).
+*
+* Everything PKCE-aware. Opaque-state CSRF guard. Refresh-token aware.
+* No connector-specific logic lives here — adapters hand a `clientId`,
+* `clientSecret`, `tokenUrl`, optional `extraAuthParams` and the rest is
+* mechanical.
+*
+* State and code_verifier are kept in a short-TTL flow store keyed by the
+* opaque `state` we round-trip through the provider. The default store is
+* in-memory for local/dev and tests. Production deployments should inject a
+* durable store backed by KV/Redis/D1/etc. so callbacks can land on any worker.
+*/
+const PENDING_TTL_MS = 6e5;
+var InMemoryOAuthFlowStore = class {
+	pendingFlows = /* @__PURE__ */ new Map();
+	put(state, flow) {
+		this.pendingFlows.set(state, flow);
+	}
+	consume(state) {
+		const flow = this.pendingFlows.get(state);
+		this.pendingFlows.delete(state);
+		if (!flow || flow.expiresAt <= Date.now()) return void 0;
+		return flow;
+	}
+	sweep(now) {
+		for (const [k, v] of this.pendingFlows) if (v.expiresAt <= now) this.pendingFlows.delete(k);
+	}
+	clear() {
+		this.pendingFlows.clear();
+	}
+};
+const defaultFlowStore = new InMemoryOAuthFlowStore();
+/** Build the authorization URL + state. SPA navigates the user there;
+*  user consents; provider redirects back to redirectUri with `code` +
+*  `state`. The caller's callback then invokes `consumePendingFlow`. */
+function startOAuthFlow(input) {
+	const store = input.store ?? defaultFlowStore;
+	const now = input.now ?? Date.now();
+	store.sweep?.(now);
+	const codeVerifier = (input.pkce ?? "required") !== "unsupported" ? base64Url(randomBytes(48)) : void 0;
+	const codeChallenge = codeVerifier ? base64Url(createHash("sha256").update(codeVerifier).digest()) : void 0;
+	const state = base64Url(randomBytes(24));
+	store.put(state, {
+		codeVerifier,
+		state,
+		projectId: input.projectId,
+		kind: input.kind,
+		label: input.label,
+		redirectUri: input.redirectUri,
+		expiresAt: now + PENDING_TTL_MS
+	});
+	const url = new URL(input.authorizationUrl);
+	url.searchParams.set("response_type", "code");
+	url.searchParams.set(oauthParameterName(input.authorizationClientIdParam, "client_id"), input.clientId);
+	url.searchParams.set("redirect_uri", input.redirectUri);
+	url.searchParams.set("scope", input.scopes.join(input.scopeSeparator ?? " "));
+	url.searchParams.set("state", state);
+	if (input.extraAuthParams) for (const [k, v] of Object.entries(input.extraAuthParams)) url.searchParams.set(k, v);
+	if (codeChallenge) {
+		url.searchParams.set("code_challenge", codeChallenge);
+		url.searchParams.set("code_challenge_method", "S256");
+	} else {
+		url.searchParams.delete("code_challenge");
+		url.searchParams.delete("code_challenge_method");
+	}
+	return {
+		authorizationUrl: url.toString(),
+		state
+	};
+}
+/** Look up + remove the pending flow record. Throws if state is unknown
+*  or expired (CSRF guard / replay protection). */
+async function consumePendingFlow(state, store = defaultFlowStore) {
+	await store.sweep?.(Date.now());
+	const flow = await store.consume(state);
+	if (!flow) throw new Error("Unknown or expired OAuth state: possible CSRF, replay, or stale flow");
+	return flow;
+}
+/** POST authorization code → token endpoint. Provider-agnostic; if a
+*  provider returns a non-standard JSON shape, the adapter wraps this
+*  call rather than reaching into the helper. */
+async function exchangeAuthorizationCode(input) {
+	const usePkce = (input.pkce ?? "required") !== "unsupported";
+	if (usePkce && !input.codeVerifier) throw new Error("OAuth token exchange requires a PKCE code_verifier");
+	const body = new URLSearchParams({
+		grant_type: "authorization_code",
+		code: input.code,
+		redirect_uri: input.redirectUri
+	});
+	if (usePkce) body.set("code_verifier", input.codeVerifier);
+	const headers = createOAuthTokenRequestHeaders(input.tokenRequestHeaders);
+	applyTokenClientAuthentication(input, body, headers);
+	const redactionValues = [
+		input.code,
+		...input.codeVerifier ? [input.codeVerifier] : [],
+		...oauthClientCredentialRedactionValues(input.clientId, input.clientSecret, headers.authorization)
+	];
+	let res;
+	try {
+		res = await (input.fetchImpl ?? fetch)(input.tokenUrl, {
+			method: "POST",
+			headers,
+			body,
+			signal: input.signal
+		});
+	} catch (cause) {
+		const detail = redactOAuthSensitiveText(cause?.message ?? "unknown", redactionValues);
+		throw new Error(`OAuth token exchange transport error: ${detail}`);
+	}
+	if (!res.ok) {
+		const text = await res.text().catch(() => "");
+		const statusText = redactOAuthSensitiveText(res.statusText, redactionValues);
+		const detail = redactOAuthSensitiveText(text, redactionValues).slice(0, 200);
+		throw new Error(`OAuth token exchange failed: ${res.status} ${statusText} — ${detail}`);
+	}
+	let json;
+	try {
+		json = await res.json();
+	} catch {
+		throw new Error("OAuth token exchange returned invalid JSON");
+	}
+	return {
+		accessToken: json.access_token,
+		refreshToken: json.refresh_token,
+		expiresIn: json.expires_in,
+		scope: json.scope,
+		tokenType: json.token_type,
+		idToken: json.id_token
+	};
+}
+/** Refresh an access token. Returns the new tokens — the connector layer
+*  is responsible for re-encrypting + persisting the envelope. */
+async function refreshAccessToken(input) {
+	const body = new URLSearchParams({
+		grant_type: "refresh_token",
+		refresh_token: input.refreshToken
+	});
+	const headers = createOAuthTokenRequestHeaders(input.tokenRequestHeaders);
+	applyTokenClientAuthentication(input, body, headers);
+	const redactionValues = [input.refreshToken, ...oauthClientCredentialRedactionValues(input.clientId, input.clientSecret, headers.authorization)];
+	let res;
+	try {
+		res = await (input.fetchImpl ?? fetch)(input.tokenUrl, {
+			method: "POST",
+			headers,
+			body,
+			signal: input.signal
+		});
+	} catch (cause) {
+		const detail = redactOAuthSensitiveText(cause?.message ?? "unknown", redactionValues);
+		throw new Error(`OAuth refresh transport error: ${detail}`);
+	}
+	if (!res.ok) {
+		const text = await res.text().catch(() => "");
+		const statusText = redactOAuthSensitiveText(res.statusText, redactionValues);
+		const detail = redactOAuthSensitiveText(text, redactionValues).slice(0, 200);
+		throw new Error(`OAuth refresh failed: ${res.status} ${statusText} — ${detail}`);
+	}
+	let json;
+	try {
+		json = await res.json();
+	} catch {
+		throw new Error("OAuth refresh returned invalid JSON");
+	}
+	return {
+		accessToken: json.access_token,
+		refreshToken: json.refresh_token,
+		expiresIn: json.expires_in,
+		scope: json.scope,
+		tokenType: json.token_type,
+		idToken: json.id_token
+	};
+}
+/** Build token-endpoint headers without permitting an adapter-supplied value
+*  to replace the authentication or form-media-type headers owned here. */
+function createOAuthTokenRequestHeaders(additional) {
+	const headers = new Headers(additional);
+	headers.set("content-type", "application/x-www-form-urlencoded");
+	headers.set("accept", "application/json");
+	headers.delete("authorization");
+	return Object.fromEntries(headers.entries());
+}
+function formEncodeOAuthClientCredential(value) {
+	return new URLSearchParams({ value }).toString().slice(6);
+}
+function createOAuthBasicAuthorizationHeader(clientId, clientSecret, encodeBase64 = defaultOAuthBase64Encode) {
+	return `Basic ${encodeBase64(`${formEncodeOAuthClientCredential(clientId)}:${formEncodeOAuthClientCredential(clientSecret)}`)}`;
+}
+function defaultOAuthBase64Encode(value) {
+	const encode = globalThis.btoa;
+	if (typeof encode !== "function") throw new Error("OAuth client_secret_basic requires a base64 encoder in this runtime.");
+	return encode(value);
+}
+function oauthClientCredentialRedactionValues(clientId, clientSecret, authorization) {
+	return [
+		clientId,
+		...clientSecret ? [clientSecret] : [],
+		...authorization ? [authorization, ...authorization.startsWith("Basic ") ? [authorization.slice(6)] : []] : []
+	];
+}
+function redactOAuthSensitiveText(text, secrets) {
+	const matchers = /* @__PURE__ */ new Map();
+	for (const secret of new Set(secrets)) {
+		if (secret.length === 0) continue;
+		addOAuthRedactionMatcher(matchers, escapeRegExp(secret), secret.length);
+		const jsonEscaped = JSON.stringify(secret).slice(1, -1);
+		addOAuthRedactionMatcher(matchers, escapeRegExp(jsonEscaped), jsonEscaped.length);
+		const formEncoded = formEncodeOAuthClientCredential(secret);
+		addOAuthRedactionMatcher(matchers, formEncodedRedactionPattern(formEncoded), Math.max(formEncoded.length, formEncoded.replaceAll("+", "%20").length));
+	}
+	return [...matchers.values()].sort((left, right) => right.representedLength - left.representedLength).reduce((redacted, matcher) => redacted.replace(matcher.pattern, "[REDACTED]"), text);
+}
+function addOAuthRedactionMatcher(matchers, source, representedLength) {
+	const existing = matchers.get(source);
+	if (existing && existing.representedLength >= representedLength) return;
+	matchers.set(source, {
+		pattern: new RegExp(source, "g"),
+		representedLength
+	});
+}
+function formEncodedRedactionPattern(formEncoded) {
+	let pattern = "";
+	for (let index = 0; index < formEncoded.length; index += 1) {
+		const character = formEncoded[index];
+		const encodedByte = formEncoded.slice(index + 1, index + 3);
+		if (character === "%" && /^[0-9A-F]{2}$/.test(encodedByte)) {
+			pattern += `%${percentEncodedBytePattern(encodedByte)}`;
+			index += 2;
+			continue;
+		}
+		if (character === "+") {
+			pattern += "(?:\\+|%20)";
+			continue;
+		}
+		pattern += escapeRegExp(character);
+	}
+	return pattern;
+}
+function percentEncodedBytePattern(encodedByte) {
+	return [...encodedByte].map((character) => /[A-F]/.test(character) ? `[${character}${character.toLowerCase()}]` : character).join("");
+}
+function escapeRegExp(value) {
+	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function applyTokenClientAuthentication(input, body, headers) {
+	const method = input.tokenClientAuthMethod ?? "client_secret_post";
+	if (method === "none") {
+		body.set(oauthParameterName(input.tokenClientIdParam, "client_id"), input.clientId);
+		return;
+	}
+	if (!input.clientSecret) throw new Error(`OAuth ${method} client authentication requires a client secret`);
+	if (method === "client_secret_post") {
+		body.set(oauthParameterName(input.tokenClientIdParam, "client_id"), input.clientId);
+		body.set(oauthParameterName(input.tokenClientSecretParam, "client_secret"), input.clientSecret);
+		return;
+	}
+	if (method === "client_secret_basic") {
+		headers.authorization = createOAuthBasicAuthorizationHeader(input.clientId, input.clientSecret);
+		return;
+	}
+	throw new Error("Unsupported OAuth token client authentication method");
+}
+function base64Url(buf) {
+	return buf.toString("base64").replace(/=+$/, "").replace(/\+/g, "-").replace(/\//g, "_");
+}
+function oauthParameterName(value, fallback) {
+	const name = value ?? fallback;
+	if (!/^[A-Za-z][A-Za-z0-9_.-]{0,63}$/.test(name)) throw new Error("Invalid OAuth parameter name");
+	return name;
+}
+/** Test-only — drop pending flows between unit-test runs. */
+function _resetPendingFlowsForTests() {
+	defaultFlowStore.clear?.();
+}
+//#endregion
+export { InMemoryOAuthFlowStore, _resetPendingFlowsForTests, consumePendingFlow, createOAuthBasicAuthorizationHeader, createOAuthTokenRequestHeaders, exchangeAuthorizationCode, formEncodeOAuthClientCredential, oauthClientCredentialRedactionValues, redactOAuthSensitiveText, refreshAccessToken, startOAuthFlow };
+
+//# sourceMappingURL=oauth.js.map

package/dist/connectors/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","names":[],"sources":["../../src/connectors/oauth.ts"],"sourcesContent":["/**\n * Generic OAuth2 helper used by every oauth-shaped connector (Google\n * Calendar, Sheets, Drive, HubSpot, Salesforce, Zoom, ...).\n *\n * Everything PKCE-aware. Opaque-state CSRF guard. Refresh-token aware.\n * No connector-specific logic lives here — adapters hand a `clientId`,\n * `clientSecret`, `tokenUrl`, optional `extraAuthParams` and the rest is\n * mechanical.\n *\n * State and code_verifier are kept in a short-TTL flow store keyed by the\n * opaque `state` we round-trip through the provider. The default store is\n * in-memory for local/dev and tests. Production deployments should inject a\n * durable store backed by KV/Redis/D1/etc. so callbacks can land on any worker.\n */\n\nimport { createHash, randomBytes } from 'crypto'\nimport type { OAuth2TokenClientAuthMethod } from './types.js'\n\nexport type OAuthPkceMode = 'required' | 'supported' | 'unsupported'\n\nexport interface PendingOAuthFlow {\n  /** code_verifier for PKCE. Absent when the provider rejects PKCE. */\n  codeVerifier?: string\n  /** Opaque-state value also returned in the OAuth redirect. */\n  state: string\n  /** Project the user is connecting under. */\n  projectId: string\n  /** Connector kind (e.g. 'google-calendar'). */\n  kind: string\n  /** Operator-supplied label that becomes DataSource.label. */\n  label: string\n  /** When we drop the entry. */\n  expiresAt: number\n  /** The redirectUri we used in the start step — must match exactly on\n   *  the callback exchange. */\n  redirectUri: string\n}\n\nconst PENDING_TTL_MS = 10 * 60 * 1000\n\nexport interface OAuthFlowStore {\n  put(state: string, flow: PendingOAuthFlow): Promise<void> | void\n  consume(state: string): Promise<PendingOAuthFlow | undefined> | PendingOAuthFlow | undefined\n  sweep?(now: number): Promise<void> | void\n  clear?(): Promise<void> | void\n}\n\nexport class InMemoryOAuthFlowStore implements OAuthFlowStore {\n  private readonly pendingFlows = new Map<string, PendingOAuthFlow>()\n\n  put(state: string, flow: PendingOAuthFlow): void {\n    this.pendingFlows.set(state, flow)\n  }\n\n  consume(state: string): PendingOAuthFlow | undefined {\n    const flow = this.pendingFlows.get(state)\n    this.pendingFlows.delete(state)\n    if (!flow || flow.expiresAt <= Date.now()) return undefined\n    return flow\n  }\n\n  sweep(now: number): void {\n    for (const [k, v] of this.pendingFlows) {\n      if (v.expiresAt <= now) this.pendingFlows.delete(k)\n    }\n  }\n\n  clear(): void {\n    this.pendingFlows.clear()\n  }\n}\n\nconst defaultFlowStore = new InMemoryOAuthFlowStore()\n\nexport interface StartOAuthInput {\n  projectId: string\n  kind: string\n  label: string\n  authorizationUrl: string\n  scopes: string[]\n  /** OAuth defaults to spaces; set `,` for providers such as Zoho. */\n  scopeSeparator?: ' ' | ','\n  clientId: string\n  /** Authorization query parameter for the client id. Defaults to\n   *  `client_id`; TikTok uses `client_key`. */\n  authorizationClientIdParam?: string\n  /** PKCE posture. Defaults to required to preserve the existing safe flow. */\n  pkce?: OAuthPkceMode\n  redirectUri: string\n  /** Optional extra query params; Google needs `access_type=offline` and\n   *  `prompt=consent` to issue refresh tokens reliably. */\n  extraAuthParams?: Record<string, string>\n  /** Optional flow store. Use a durable store in distributed production\n   *  runtimes; omitted means local in-memory storage. */\n  store?: OAuthFlowStore\n  /** Override clock for tests. */\n  now?: number\n}\n\nexport interface StartOAuthOutput {\n  /** URL the SPA should redirect the user to. */\n  authorizationUrl: string\n  /** State token — caller stashes this in localStorage to verify on\n   *  callback. */\n  state: string\n}\n\n/** Build the authorization URL + state. SPA navigates the user there;\n *  user consents; provider redirects back to redirectUri with `code` +\n *  `state`. The caller's callback then invokes `consumePendingFlow`. */\nexport function startOAuthFlow(input: StartOAuthInput): StartOAuthOutput {\n  const store = input.store ?? defaultFlowStore\n  const now = input.now ?? Date.now()\n  store.sweep?.(now)\n  const usePkce = (input.pkce ?? 'required') !== 'unsupported'\n  const codeVerifier = usePkce ? base64Url(randomBytes(48)) : undefined\n  const codeChallenge = codeVerifier\n    ? base64Url(createHash('sha256').update(codeVerifier).digest())\n    : undefined\n  const state = base64Url(randomBytes(24))\n\n  store.put(state, {\n    codeVerifier,\n    state,\n    projectId: input.projectId,\n    kind: input.kind,\n    label: input.label,\n    redirectUri: input.redirectUri,\n    expiresAt: now + PENDING_TTL_MS,\n  })\n\n  const url = new URL(input.authorizationUrl)\n  url.searchParams.set('response_type', 'code')\n  url.searchParams.set(\n    oauthParameterName(input.authorizationClientIdParam, 'client_id'),\n    input.clientId,\n  )\n  url.searchParams.set('redirect_uri', input.redirectUri)\n  url.searchParams.set('scope', input.scopes.join(input.scopeSeparator ?? ' '))\n  url.searchParams.set('state', state)\n  if (input.extraAuthParams) {\n    for (const [k, v] of Object.entries(input.extraAuthParams)) {\n      url.searchParams.set(k, v)\n    }\n  }\n  if (codeChallenge) {\n    url.searchParams.set('code_challenge', codeChallenge)\n    url.searchParams.set('code_challenge_method', 'S256')\n  } else {\n    url.searchParams.delete('code_challenge')\n    url.searchParams.delete('code_challenge_method')\n  }\n  return { authorizationUrl: url.toString(), state }\n}\n\n/** Look up + remove the pending flow record. Throws if state is unknown\n *  or expired (CSRF guard / replay protection). */\nexport async function consumePendingFlow(state: string, store: OAuthFlowStore = defaultFlowStore): Promise<PendingOAuthFlow> {\n  await store.sweep?.(Date.now())\n  const flow = await store.consume(state)\n  if (!flow) {\n    throw new Error('Unknown or expired OAuth state: possible CSRF, replay, or stale flow')\n  }\n  return flow\n}\n\nexport interface ExchangeCodeInput {\n  tokenUrl: string\n  clientId: string\n  /** Required unless tokenClientAuthMethod is `none`. */\n  clientSecret?: string\n  /** Defaults to client_secret_post for backward compatibility. */\n  tokenClientAuthMethod?: OAuth2TokenClientAuthMethod\n  tokenClientIdParam?: string\n  tokenClientSecretParam?: string\n  code: string\n  /** Required unless pkce is explicitly unsupported. */\n  codeVerifier?: string\n  /** PKCE posture. Defaults to required. */\n  pkce?: OAuthPkceMode\n  redirectUri: string\n  /** Non-secret provider identification headers for the token request. */\n  tokenRequestHeaders?: Readonly<Record<string, string>>\n  fetchImpl?: typeof fetch\n  signal?: AbortSignal\n}\n\nexport interface OAuthTokens {\n  accessToken: string\n  refreshToken?: string\n  expiresIn?: number\n  scope?: string\n  tokenType?: string\n  /** OpenID Connect identity token returned when the connector requests\n   *  `openid`. Kept separate from the access credential so adapters can\n   *  capture stable account metadata without persisting the ID token. */\n  idToken?: string\n}\n\n/** POST authorization code → token endpoint. Provider-agnostic; if a\n *  provider returns a non-standard JSON shape, the adapter wraps this\n *  call rather than reaching into the helper. */\nexport async function exchangeAuthorizationCode(input: ExchangeCodeInput): Promise<OAuthTokens> {\n  const usePkce = (input.pkce ?? 'required') !== 'unsupported'\n  if (usePkce && !input.codeVerifier) {\n    throw new Error('OAuth token exchange requires a PKCE code_verifier')\n  }\n  const body = new URLSearchParams({\n    grant_type: 'authorization_code',\n    code: input.code,\n    redirect_uri: input.redirectUri,\n  })\n  if (usePkce) body.set('code_verifier', input.codeVerifier!)\n  const headers = createOAuthTokenRequestHeaders(input.tokenRequestHeaders)\n  applyTokenClientAuthentication(input, body, headers)\n  const redactionValues = [\n    input.code,\n    ...(input.codeVerifier ? [input.codeVerifier] : []),\n    ...oauthClientCredentialRedactionValues(\n      input.clientId,\n      input.clientSecret,\n      headers.authorization,\n    ),\n  ]\n  let res: Response\n  try {\n    res = await (input.fetchImpl ?? fetch)(input.tokenUrl, {\n      method: 'POST',\n      headers,\n      body,\n      signal: input.signal,\n    })\n  } catch (cause) {\n    const detail = redactOAuthSensitiveText(\n      (cause as Error)?.message ?? 'unknown',\n      redactionValues,\n    )\n    throw new Error(`OAuth token exchange transport error: ${detail}`)\n  }\n  if (!res.ok) {\n    const text = await res.text().catch(() => '')\n    const statusText = redactOAuthSensitiveText(res.statusText, redactionValues)\n    const detail = redactOAuthSensitiveText(text, redactionValues).slice(0, 200)\n    throw new Error(\n      `OAuth token exchange failed: ${res.status} ${statusText} — ${detail}`,\n    )\n  }\n  let json: {\n    access_token: string\n    refresh_token?: string\n    expires_in?: number\n    scope?: string\n    token_type?: string\n    id_token?: string\n  }\n  try {\n    json = await res.json() as typeof json\n  } catch {\n    throw new Error('OAuth token exchange returned invalid JSON')\n  }\n  return {\n    accessToken: json.access_token,\n    refreshToken: json.refresh_token,\n    expiresIn: json.expires_in,\n    scope: json.scope,\n    tokenType: json.token_type,\n    idToken: json.id_token,\n  }\n}\n\nexport interface RefreshInput {\n  tokenUrl: string\n  clientId: string\n  /** Required unless tokenClientAuthMethod is `none`. */\n  clientSecret?: string\n  /** Defaults to client_secret_post for backward compatibility. */\n  tokenClientAuthMethod?: OAuth2TokenClientAuthMethod\n  tokenClientIdParam?: string\n  tokenClientSecretParam?: string\n  refreshToken: string\n  /** Non-secret provider identification headers for the token request. */\n  tokenRequestHeaders?: Readonly<Record<string, string>>\n  fetchImpl?: typeof fetch\n  signal?: AbortSignal\n}\n\n/** Refresh an access token. Returns the new tokens — the connector layer\n *  is responsible for re-encrypting + persisting the envelope. */\nexport async function refreshAccessToken(input: RefreshInput): Promise<OAuthTokens> {\n  const body = new URLSearchParams({\n    grant_type: 'refresh_token',\n    refresh_token: input.refreshToken,\n  })\n  const headers = createOAuthTokenRequestHeaders(input.tokenRequestHeaders)\n  applyTokenClientAuthentication(input, body, headers)\n  const redactionValues = [\n    input.refreshToken,\n    ...oauthClientCredentialRedactionValues(\n      input.clientId,\n      input.clientSecret,\n      headers.authorization,\n    ),\n  ]\n  let res: Response\n  try {\n    res = await (input.fetchImpl ?? fetch)(input.tokenUrl, {\n      method: 'POST',\n      headers,\n      body,\n      signal: input.signal,\n    })\n  } catch (cause) {\n    const detail = redactOAuthSensitiveText(\n      (cause as Error)?.message ?? 'unknown',\n      redactionValues,\n    )\n    throw new Error(`OAuth refresh transport error: ${detail}`)\n  }\n  if (!res.ok) {\n    const text = await res.text().catch(() => '')\n    const statusText = redactOAuthSensitiveText(res.statusText, redactionValues)\n    const detail = redactOAuthSensitiveText(text, redactionValues).slice(0, 200)\n    throw new Error(`OAuth refresh failed: ${res.status} ${statusText} — ${detail}`)\n  }\n  let json: {\n    access_token: string\n    refresh_token?: string\n    expires_in?: number\n    scope?: string\n    token_type?: string\n    id_token?: string\n  }\n  try {\n    json = await res.json() as typeof json\n  } catch {\n    throw new Error('OAuth refresh returned invalid JSON')\n  }\n  return {\n    accessToken: json.access_token,\n    // Some providers omit refresh_token on refresh — keep the previous one\n    // in that case (caller passes through if undefined).\n    refreshToken: json.refresh_token,\n    expiresIn: json.expires_in,\n    scope: json.scope,\n    tokenType: json.token_type,\n    idToken: json.id_token,\n  }\n}\n\n/** Build token-endpoint headers without permitting an adapter-supplied value\n *  to replace the authentication or form-media-type headers owned here. */\nexport function createOAuthTokenRequestHeaders(\n  additional?: Readonly<Record<string, string>>,\n): Record<string, string> {\n  const headers = new Headers(additional)\n  headers.set('content-type', 'application/x-www-form-urlencoded')\n  headers.set('accept', 'application/json')\n  headers.delete('authorization')\n  return Object.fromEntries(headers.entries())\n}\n\nexport function formEncodeOAuthClientCredential(value: string): string {\n  return new URLSearchParams({ value }).toString().slice('value='.length)\n}\n\nexport function createOAuthBasicAuthorizationHeader(\n  clientId: string,\n  clientSecret: string,\n  encodeBase64: (value: string) => string = defaultOAuthBase64Encode,\n): string {\n  const encodedClientId = formEncodeOAuthClientCredential(clientId)\n  const encodedClientSecret = formEncodeOAuthClientCredential(clientSecret)\n  return `Basic ${encodeBase64(`${encodedClientId}:${encodedClientSecret}`)}`\n}\n\nfunction defaultOAuthBase64Encode(value: string): string {\n  const encode = globalThis.btoa\n  if (typeof encode !== 'function') {\n    throw new Error(\n      'OAuth client_secret_basic requires a base64 encoder in this runtime.',\n    )\n  }\n  return encode(value)\n}\n\nexport function oauthClientCredentialRedactionValues(\n  clientId: string,\n  clientSecret?: string,\n  authorization?: string,\n): string[] {\n  return [\n    clientId,\n    ...(clientSecret ? [clientSecret] : []),\n    ...(authorization\n      ? [\n          authorization,\n          ...(authorization.startsWith('Basic ')\n            ? [authorization.slice('Basic '.length)]\n            : []),\n        ]\n      : []),\n  ]\n}\n\nexport function redactOAuthSensitiveText(\n  text: string,\n  secrets: readonly string[],\n): string {\n  const matchers = new Map<string, { pattern: RegExp; representedLength: number }>()\n  for (const secret of new Set(secrets)) {\n    if (secret.length === 0) continue\n    addOAuthRedactionMatcher(matchers, escapeRegExp(secret), secret.length)\n\n    const jsonEscaped = JSON.stringify(secret).slice(1, -1)\n    addOAuthRedactionMatcher(\n      matchers,\n      escapeRegExp(jsonEscaped),\n      jsonEscaped.length,\n    )\n\n    const formEncoded = formEncodeOAuthClientCredential(secret)\n    addOAuthRedactionMatcher(\n      matchers,\n      formEncodedRedactionPattern(formEncoded),\n      Math.max(formEncoded.length, formEncoded.replaceAll('+', '%20').length),\n    )\n  }\n\n  return [...matchers.values()]\n    .sort((left, right) => right.representedLength - left.representedLength)\n    .reduce(\n      (redacted, matcher) => redacted.replace(matcher.pattern, '[REDACTED]'),\n      text,\n    )\n}\n\nfunction addOAuthRedactionMatcher(\n  matchers: Map<string, { pattern: RegExp; representedLength: number }>,\n  source: string,\n  representedLength: number,\n): void {\n  const existing = matchers.get(source)\n  if (existing && existing.representedLength >= representedLength) return\n  matchers.set(source, {\n    pattern: new RegExp(source, 'g'),\n    representedLength,\n  })\n}\n\nfunction formEncodedRedactionPattern(formEncoded: string): string {\n  let pattern = ''\n  for (let index = 0; index < formEncoded.length; index += 1) {\n    const character = formEncoded[index]!\n    const encodedByte = formEncoded.slice(index + 1, index + 3)\n    if (character === '%' && /^[0-9A-F]{2}$/.test(encodedByte)) {\n      pattern += `%${percentEncodedBytePattern(encodedByte)}`\n      index += 2\n      continue\n    }\n    if (character === '+') {\n      pattern += '(?:\\\\+|%20)'\n      continue\n    }\n    pattern += escapeRegExp(character)\n  }\n  return pattern\n}\n\nfunction percentEncodedBytePattern(encodedByte: string): string {\n  return [...encodedByte]\n    .map((character) =>\n      /[A-F]/.test(character)\n        ? `[${character}${character.toLowerCase()}]`\n        : character,\n    )\n    .join('')\n}\n\nfunction escapeRegExp(value: string): string {\n  return value.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n}\n\nfunction applyTokenClientAuthentication(\n  input: {\n    clientId: string\n    clientSecret?: string\n    tokenClientIdParam?: string\n    tokenClientSecretParam?: string\n    tokenClientAuthMethod?: OAuth2TokenClientAuthMethod\n  },\n  body: URLSearchParams,\n  headers: Record<string, string>,\n): void {\n  const method = input.tokenClientAuthMethod ?? 'client_secret_post'\n  if (method === 'none') {\n    body.set(oauthParameterName(input.tokenClientIdParam, 'client_id'), input.clientId)\n    return\n  }\n  if (!input.clientSecret) {\n    throw new Error(`OAuth ${method} client authentication requires a client secret`)\n  }\n  if (method === 'client_secret_post') {\n    body.set(oauthParameterName(input.tokenClientIdParam, 'client_id'), input.clientId)\n    body.set(\n      oauthParameterName(input.tokenClientSecretParam, 'client_secret'),\n      input.clientSecret,\n    )\n    return\n  }\n  if (method === 'client_secret_basic') {\n    headers.authorization = createOAuthBasicAuthorizationHeader(\n      input.clientId,\n      input.clientSecret,\n    )\n    return\n  }\n  throw new Error('Unsupported OAuth token client authentication method')\n}\n\nfunction base64Url(buf: Buffer): string {\n  return buf.toString('base64').replace(/=+$/, '').replace(/\\+/g, '-').replace(/\\//g, '_')\n}\n\nfunction oauthParameterName(value: string | undefined, fallback: string): string {\n  const name = value ?? fallback\n  if (!/^[A-Za-z][A-Za-z0-9_.-]{0,63}$/.test(name)) {\n    throw new Error('Invalid OAuth parameter name')\n  }\n  return name\n}\n\n/** Test-only — drop pending flows between unit-test runs. */\nexport function _resetPendingFlowsForTests(): void {\n  defaultFlowStore.clear?.()\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAsCA,MAAM,iBAAiB;AASvB,IAAa,yBAAb,MAA8D;CAC5D,+BAAgC,IAAI,IAA8B;CAElE,IAAI,OAAe,MAA8B;EAC/C,KAAK,aAAa,IAAI,OAAO,IAAI;CACnC;CAEA,QAAQ,OAA6C;EACnD,MAAM,OAAO,KAAK,aAAa,IAAI,KAAK;EACxC,KAAK,aAAa,OAAO,KAAK;EAC9B,IAAI,CAAC,QAAQ,KAAK,aAAa,KAAK,IAAI,GAAG,OAAO,KAAA;EAClD,OAAO;CACT;CAEA,MAAM,KAAmB;EACvB,KAAK,MAAM,CAAC,GAAG,MAAM,KAAK,cACxB,IAAI,EAAE,aAAa,KAAK,KAAK,aAAa,OAAO,CAAC;CAEtD;CAEA,QAAc;EACZ,KAAK,aAAa,MAAM;CAC1B;AACF;AAEA,MAAM,mBAAmB,IAAI,uBAAuB;;;;AAsCpD,SAAgB,eAAe,OAA0C;CACvE,MAAM,QAAQ,MAAM,SAAS;CAC7B,MAAM,MAAM,MAAM,OAAO,KAAK,IAAI;CAClC,MAAM,QAAQ,GAAG;CAEjB,MAAM,gBADW,MAAM,QAAQ,gBAAgB,gBAChB,UAAU,YAAY,EAAE,CAAC,IAAI,KAAA;CAC5D,MAAM,gBAAgB,eAClB,UAAU,WAAW,QAAQ,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,OAAO,CAAC,IAC5D,KAAA;CACJ,MAAM,QAAQ,UAAU,YAAY,EAAE,CAAC;CAEvC,MAAM,IAAI,OAAO;EACf;EACA;EACA,WAAW,MAAM;EACjB,MAAM,MAAM;EACZ,OAAO,MAAM;EACb,aAAa,MAAM;EACnB,WAAW,MAAM;CACnB,CAAC;CAED,MAAM,MAAM,IAAI,IAAI,MAAM,gBAAgB;CAC1C,IAAI,aAAa,IAAI,iBAAiB,MAAM;CAC5C,IAAI,aAAa,IACf,mBAAmB,MAAM,4BAA4B,WAAW,GAChE,MAAM,QACR;CACA,IAAI,aAAa,IAAI,gBAAgB,MAAM,WAAW;CACtD,IAAI,aAAa,IAAI,SAAS,MAAM,OAAO,KAAK,MAAM,kBAAkB,GAAG,CAAC;CAC5E,IAAI,aAAa,IAAI,SAAS,KAAK;CACnC,IAAI,MAAM,iBACR,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,MAAM,eAAe,GACvD,IAAI,aAAa,IAAI,GAAG,CAAC;CAG7B,IAAI,eAAe;EACjB,IAAI,aAAa,IAAI,kBAAkB,aAAa;EACpD,IAAI,aAAa,IAAI,yBAAyB,MAAM;CACtD,OAAO;EACL,IAAI,aAAa,OAAO,gBAAgB;EACxC,IAAI,aAAa,OAAO,uBAAuB;CACjD;CACA,OAAO;EAAE,kBAAkB,IAAI,SAAS;EAAG;CAAM;AACnD;;;AAIA,eAAsB,mBAAmB,OAAe,QAAwB,kBAA6C;CAC3H,MAAM,MAAM,QAAQ,KAAK,IAAI,CAAC;CAC9B,MAAM,OAAO,MAAM,MAAM,QAAQ,KAAK;CACtC,IAAI,CAAC,MACH,MAAM,IAAI,MAAM,sEAAsE;CAExF,OAAO;AACT;;;;AAsCA,eAAsB,0BAA0B,OAAgD;CAC9F,MAAM,WAAW,MAAM,QAAQ,gBAAgB;CAC/C,IAAI,WAAW,CAAC,MAAM,cACpB,MAAM,IAAI,MAAM,oDAAoD;CAEtE,MAAM,OAAO,IAAI,gBAAgB;EAC/B,YAAY;EACZ,MAAM,MAAM;EACZ,cAAc,MAAM;CACtB,CAAC;CACD,IAAI,SAAS,KAAK,IAAI,iBAAiB,MAAM,YAAa;CAC1D,MAAM,UAAU,+BAA+B,MAAM,mBAAmB;CACxE,+BAA+B,OAAO,MAAM,OAAO;CACnD,MAAM,kBAAkB;EACtB,MAAM;EACN,GAAI,MAAM,eAAe,CAAC,MAAM,YAAY,IAAI,CAAC;EACjD,GAAG,qCACD,MAAM,UACN,MAAM,cACN,QAAQ,aACV;CACF;CACA,IAAI;CACJ,IAAI;EACF,MAAM,OAAO,MAAM,aAAa,MAAA,CAAO,MAAM,UAAU;GACrD,QAAQ;GACR;GACA;GACA,QAAQ,MAAM;EAChB,CAAC;CACH,SAAS,OAAO;EACd,MAAM,SAAS,yBACZ,OAAiB,WAAW,WAC7B,eACF;EACA,MAAM,IAAI,MAAM,yCAAyC,QAAQ;CACnE;CACA,IAAI,CAAC,IAAI,IAAI;EACX,MAAM,OAAO,MAAM,IAAI,KAAK,CAAC,CAAC,YAAY,EAAE;EAC5C,MAAM,aAAa,yBAAyB,IAAI,YAAY,eAAe;EAC3E,MAAM,SAAS,yBAAyB,MAAM,eAAe,CAAC,CAAC,MAAM,GAAG,GAAG;EAC3E,MAAM,IAAI,MACR,gCAAgC,IAAI,OAAO,GAAG,WAAW,KAAK,QAChE;CACF;CACA,IAAI;CAQJ,IAAI;EACF,OAAO,MAAM,IAAI,KAAK;CACxB,QAAQ;EACN,MAAM,IAAI,MAAM,4CAA4C;CAC9D;CACA,OAAO;EACL,aAAa,KAAK;EAClB,cAAc,KAAK;EACnB,WAAW,KAAK;EAChB,OAAO,KAAK;EACZ,WAAW,KAAK;EAChB,SAAS,KAAK;CAChB;AACF;;;AAoBA,eAAsB,mBAAmB,OAA2C;CAClF,MAAM,OAAO,IAAI,gBAAgB;EAC/B,YAAY;EACZ,eAAe,MAAM;CACvB,CAAC;CACD,MAAM,UAAU,+BAA+B,MAAM,mBAAmB;CACxE,+BAA+B,OAAO,MAAM,OAAO;CACnD,MAAM,kBAAkB,CACtB,MAAM,cACN,GAAG,qCACD,MAAM,UACN,MAAM,cACN,QAAQ,aACV,CACF;CACA,IAAI;CACJ,IAAI;EACF,MAAM,OAAO,MAAM,aAAa,MAAA,CAAO,MAAM,UAAU;GACrD,QAAQ;GACR;GACA;GACA,QAAQ,MAAM;EAChB,CAAC;CACH,SAAS,OAAO;EACd,MAAM,SAAS,yBACZ,OAAiB,WAAW,WAC7B,eACF;EACA,MAAM,IAAI,MAAM,kCAAkC,QAAQ;CAC5D;CACA,IAAI,CAAC,IAAI,IAAI;EACX,MAAM,OAAO,MAAM,IAAI,KAAK,CAAC,CAAC,YAAY,EAAE;EAC5C,MAAM,aAAa,yBAAyB,IAAI,YAAY,eAAe;EAC3E,MAAM,SAAS,yBAAyB,MAAM,eAAe,CAAC,CAAC,MAAM,GAAG,GAAG;EAC3E,MAAM,IAAI,MAAM,yBAAyB,IAAI,OAAO,GAAG,WAAW,KAAK,QAAQ;CACjF;CACA,IAAI;CAQJ,IAAI;EACF,OAAO,MAAM,IAAI,KAAK;CACxB,QAAQ;EACN,MAAM,IAAI,MAAM,qCAAqC;CACvD;CACA,OAAO;EACL,aAAa,KAAK;EAGlB,cAAc,KAAK;EACnB,WAAW,KAAK;EAChB,OAAO,KAAK;EACZ,WAAW,KAAK;EAChB,SAAS,KAAK;CAChB;AACF;;;AAIA,SAAgB,+BACd,YACwB;CACxB,MAAM,UAAU,IAAI,QAAQ,UAAU;CACtC,QAAQ,IAAI,gBAAgB,mCAAmC;CAC/D,QAAQ,IAAI,UAAU,kBAAkB;CACxC,QAAQ,OAAO,eAAe;CAC9B,OAAO,OAAO,YAAY,QAAQ,QAAQ,CAAC;AAC7C;AAEA,SAAgB,gCAAgC,OAAuB;CACrE,OAAO,IAAI,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAe;AACxE;AAEA,SAAgB,oCACd,UACA,cACA,eAA0C,0BAClC;CAGR,OAAO,SAAS,aAAa,GAFL,gCAAgC,QAEV,EAAE,GADpB,gCAAgC,YACS,GAAG;AAC1E;AAEA,SAAS,yBAAyB,OAAuB;CACvD,MAAM,SAAS,WAAW;CAC1B,IAAI,OAAO,WAAW,YACpB,MAAM,IAAI,MACR,sEACF;CAEF,OAAO,OAAO,KAAK;AACrB;AAEA,SAAgB,qCACd,UACA,cACA,eACU;CACV,OAAO;EACL;EACA,GAAI,eAAe,CAAC,YAAY,IAAI,CAAC;EACrC,GAAI,gBACA,CACE,eACA,GAAI,cAAc,WAAW,QAAQ,IACjC,CAAC,cAAc,MAAM,CAAe,CAAC,IACrC,CAAC,CACP,IACA,CAAC;CACP;AACF;AAEA,SAAgB,yBACd,MACA,SACQ;CACR,MAAM,2BAAW,IAAI,IAA4D;CACjF,KAAK,MAAM,UAAU,IAAI,IAAI,OAAO,GAAG;EACrC,IAAI,OAAO,WAAW,GAAG;EACzB,yBAAyB,UAAU,aAAa,MAAM,GAAG,OAAO,MAAM;EAEtE,MAAM,cAAc,KAAK,UAAU,MAAM,CAAC,CAAC,MAAM,GAAG,EAAE;EACtD,yBACE,UACA,aAAa,WAAW,GACxB,YAAY,MACd;EAEA,MAAM,cAAc,gCAAgC,MAAM;EAC1D,yBACE,UACA,4BAA4B,WAAW,GACvC,KAAK,IAAI,YAAY,QAAQ,YAAY,WAAW,KAAK,KAAK,CAAC,CAAC,MAAM,CACxE;CACF;CAEA,OAAO,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC,CAC1B,MAAM,MAAM,UAAU,MAAM,oBAAoB,KAAK,iBAAiB,CAAC,CACvE,QACE,UAAU,YAAY,SAAS,QAAQ,QAAQ,SAAS,YAAY,GACrE,IACF;AACJ;AAEA,SAAS,yBACP,UACA,QACA,mBACM;CACN,MAAM,WAAW,SAAS,IAAI,MAAM;CACpC,IAAI,YAAY,SAAS,qBAAqB,mBAAmB;CACjE,SAAS,IAAI,QAAQ;EACnB,SAAS,IAAI,OAAO,QAAQ,GAAG;EAC/B;CACF,CAAC;AACH;AAEA,SAAS,4BAA4B,aAA6B;CAChE,IAAI,UAAU;CACd,KAAK,IAAI,QAAQ,GAAG,QAAQ,YAAY,QAAQ,SAAS,GAAG;EAC1D,MAAM,YAAY,YAAY;EAC9B,MAAM,cAAc,YAAY,MAAM,QAAQ,GAAG,QAAQ,CAAC;EAC1D,IAAI,cAAc,OAAO,gBAAgB,KAAK,WAAW,GAAG;GAC1D,WAAW,IAAI,0BAA0B,WAAW;GACpD,SAAS;GACT;EACF;EACA,IAAI,cAAc,KAAK;GACrB,WAAW;GACX;EACF;EACA,WAAW,aAAa,SAAS;CACnC;CACA,OAAO;AACT;AAEA,SAAS,0BAA0B,aAA6B;CAC9D,OAAO,CAAC,GAAG,WAAW,CAAC,CACpB,KAAK,cACJ,QAAQ,KAAK,SAAS,IAClB,IAAI,YAAY,UAAU,YAAY,EAAE,KACxC,SACN,CAAC,CACA,KAAK,EAAE;AACZ;AAEA,SAAS,aAAa,OAAuB;CAC3C,OAAO,MAAM,QAAQ,uBAAuB,MAAM;AACpD;AAEA,SAAS,+BACP,OAOA,MACA,SACM;CACN,MAAM,SAAS,MAAM,yBAAyB;CAC9C,IAAI,WAAW,QAAQ;EACrB,KAAK,IAAI,mBAAmB,MAAM,oBAAoB,WAAW,GAAG,MAAM,QAAQ;EAClF;CACF;CACA,IAAI,CAAC,MAAM,cACT,MAAM,IAAI,MAAM,SAAS,OAAO,gDAAgD;CAElF,IAAI,WAAW,sBAAsB;EACnC,KAAK,IAAI,mBAAmB,MAAM,oBAAoB,WAAW,GAAG,MAAM,QAAQ;EAClF,KAAK,IACH,mBAAmB,MAAM,wBAAwB,eAAe,GAChE,MAAM,YACR;EACA;CACF;CACA,IAAI,WAAW,uBAAuB;EACpC,QAAQ,gBAAgB,oCACtB,MAAM,UACN,MAAM,YACR;EACA;CACF;CACA,MAAM,IAAI,MAAM,sDAAsD;AACxE;AAEA,SAAS,UAAU,KAAqB;CACtC,OAAO,IAAI,SAAS,QAAQ,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC,QAAQ,OAAO,GAAG,CAAC,CAAC,QAAQ,OAAO,GAAG;AACzF;AAEA,SAAS,mBAAmB,OAA2B,UAA0B;CAC/E,MAAM,OAAO,SAAS;CACtB,IAAI,CAAC,iCAAiC,KAAK,IAAI,GAC7C,MAAM,IAAI,MAAM,8BAA8B;CAEhD,OAAO;AACT;;AAGA,SAAgB,6BAAmC;CACjD,iBAAiB,QAAQ;AAC3B"}

package/dist/{consumer-BC6pCUzI.d.ts → consumer-zHtoJixe.d.ts}

@@ -1,10 +1,10 @@
 import { O as ResolvedDataSource, d as ConnectorCredentials, u as ConnectorAdapter } from "./types-CauVC-Gr.js";
-import { A as IntegrationTriggerSubscription, C as IntegrationOAuthStateStore, D as IntegrationProviderKind, E as IntegrationProvider, F as StartAuthRequest, I as StartAuthResult, M as IssueCapabilityRequest, N as IssuedIntegrationCapability, O as IntegrationSecretStore, P as SecretRef, S as IntegrationOAuthStateOutcome, T as IntegrationPolicyEngine, _ as IntegrationCredentialsRotatedEvent, a as IntegrationActionResult, b as IntegrationHubOptions, c as IntegrationApprovalRequest, d as IntegrationConnection, f as IntegrationConnectionStore, h as IntegrationConnectorCategory, i as IntegrationActionRequest, j as InvokeWithCapabilityRequest, k as IntegrationTriggerEvent, l as IntegrationCapability, m as IntegrationConnectorAction, n as HttpIntegrationProviderOptions, o as IntegrationActionRisk, p as IntegrationConnector, s as IntegrationActor, t as CompleteAuthRequest, u as IntegrationCatalogSource, v as IntegrationDataClass, w as IntegrationPolicyDecision, x as IntegrationOAuthState, y as IntegrationGuardContext } from "./core-types-LLZ7aRGv.js";
-import { i as IntegrationRegistryEntry, n as IntegrationRegistry, o as IntegrationRegistrySummary, r as IntegrationRegistryConflict, t as ComposeIntegrationRegistryOptions } from "./registry-core-DskHDk7Y.js";
+import { A as IntegrationTriggerSubscription, C as IntegrationOAuthStateStore, D as IntegrationProviderKind, E as IntegrationProvider, F as StartAuthRequest, I as StartAuthResult, N as IssuedIntegrationCapability, O as IntegrationSecretStore, P as SecretRef, S as IntegrationOAuthStateOutcome, T as IntegrationPolicyEngine, _ as IntegrationCredentialsRotatedEvent, a as IntegrationActionResult, c as IntegrationApprovalRequest, d as IntegrationConnection, f as IntegrationConnectionStore, h as IntegrationConnectorCategory, i as IntegrationActionRequest, j as InvokeWithCapabilityRequest, k as IntegrationTriggerEvent, l as IntegrationCapability, m as IntegrationConnectorAction, n as HttpIntegrationProviderOptions, o as IntegrationActionRisk, p as IntegrationConnector, s as IntegrationActor, t as CompleteAuthRequest, u as IntegrationCatalogSource, v as IntegrationDataClass, w as IntegrationPolicyDecision, x as IntegrationOAuthState, y as IntegrationGuardContext } from "./core-types-LLZ7aRGv.js";
+import { i as IntegrationRegistryEntry, n as IntegrationRegistry, o as IntegrationRegistrySummary, r as IntegrationRegistryConflict } from "./registry-core-DskHDk7Y.js";
 import { n as IntegrationToolDefinition } from "./catalog-CrEDB-gP.js";
 import "./billing-access-policy-CtvuHvM8.js";
 import "./index-CJBkqBWQ.js";
-import "./index-j2QziJA5.js";
+import "./index-BQXENE9p.js";
 import { a as StaticIntegrationPolicyOptions, b as IntegrationAuditSink, i as StaticIntegrationPolicyEngine } from "./policy-DCRcxl7B.js";
 //#region src/core-error.d.ts
 /**
@@ -1368,36 +1368,6 @@ declare class InMemoryConnectionStore implements IntegrationConnectionStore {
   listByOwner(owner: IntegrationActor): IntegrationConnection[];
   delete(connectionId: string): void;
 }
-declare class IntegrationHub {
-  private readonly providers;
-  private readonly store;
-  private readonly capabilitySecret;
-  private readonly guard;
-  private readonly policy;
-  /** Host-injected (or in-memory default) secret store. The hub re-persists
-   *  rotated credentials here when a connection carries a secretRef. */
-  readonly secretStore: IntegrationHubOptions['secretStore'];
-  private readonly oauthStateStore;
-  private readonly oauthStateTtlMs;
-  private readonly credentialsRotated;
-  private readonly now;
-  constructor(options: IntegrationHubOptions);
-  listConnectors(): Promise<IntegrationConnector[]>;
-  listRegistry(options?: ComposeIntegrationRegistryOptions): Promise<IntegrationRegistry>;
-  startAuth(providerId: string, request: StartAuthRequest): Promise<StartAuthResult>;
-  completeAuth(providerId: string, request: CompleteAuthRequest): Promise<IntegrationConnection>;
-  upsertConnection(connection: IntegrationConnection): Promise<IntegrationConnection>;
-  listConnections(owner: IntegrationActor): Promise<IntegrationConnection[]>;
-  getConnection(connectionId: string): Promise<IntegrationConnection | undefined>;
-  issueCapability(request: IssueCapabilityRequest): Promise<IssuedIntegrationCapability>;
-  verifyCapability(token: string): IntegrationCapability;
-  invokeWithCapability(token: string, request: InvokeWithCapabilityRequest): Promise<IntegrationActionResult>;
-  subscribeTrigger(connectionId: string, trigger: string, targetUrl?: string): Promise<IntegrationTriggerSubscription>;
-  private requireProvider;
-  private requireConnector;
-  private requireConnection;
-  private assertConnectionActive;
-}
 declare function sanitizeConnection(connection: IntegrationConnection): Record<string, unknown>;
 declare function createMockIntegrationProvider(options?: {
   id?: string;
@@ -1405,8 +1375,6 @@ declare function createMockIntegrationProvider(options?: {
   onInvoke?: (connection: IntegrationConnection, request: IntegrationActionRequest) => IntegrationActionResult | Promise<IntegrationActionResult>;
 }): IntegrationProvider;
 declare function createHttpIntegrationProvider(options: HttpIntegrationProviderOptions): IntegrationProvider;
-declare function signCapability(capability: IntegrationCapability, secret: string): string;
-declare function verifyCapabilityToken(token: string, secret: string): IntegrationCapability;
 //#endregion
 //#region src/consumer.d.ts
 type IntegrationHubAuth = {
@@ -1578,5 +1546,5 @@ declare class IntegrationHubClient {
 }
 declare function createIntegrationHubClient(options: IntegrationHubClientOptions): IntegrationHubClient;
 //#endregion
-export { createActivepiecesExecutorProvider as $, BrokerToken as $n, InMemoryIntegrationHealthcheckStore as $t, TangleIntegrationCatalogEntry as A, InMemoryIntegrationOAuthStateStore as An, CANONICAL_INTEGRATION_ACTIONS as Ar, invocationRequestFromEnvelope as At, extractExternalCatalogPublicCount as B, createConnectorAdapterProvider as Bn, IntegrationApprovalStatus as Br, PROVIDER_PASSTHROUGH_ACTION as Bt, TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID as C, WorkspaceCapabilityDiscovery as Cn, IntegrationRequirementResolution as Cr, IntegrationInvocationEnvelopeValidationOptions as Ct, TangleCatalogRuntimePackageManifest as D, filterDiscoveryByWorkspaceScopes as Dn, IntegrationRuntimeOptions as Dr, NormalizedIntegrationResult as Dt, TangleCatalogExecutorProviderOptions as E, discoverWorkspaceCapabilities as En, IntegrationRuntimeHub as Er, IntegrationSandboxHostOptions as Et, TangleIntegrationImplementationKind as F, revokeConnection as Fn, ApprovalBackedPolicyEngine as Fr, CatalogExecutorInvocation as Ft, renderTangleCatalogRuntimePnpmAddCommand as G, renderConsentSummary as Gn, IntegrationErrorRuntimeCode as Gr, ManifestValidationIssue as Gt, listTangleIntegrationCatalogRuntimePackages as H, ConsentSummary as Hn, createApprovalBackedPolicyEngine as Hr, ProviderPassthroughPolicy as Ht, auditTangleIntegrationCatalogFreshness as I, ConnectorAdapterProviderOptions as In, ApprovalBackedPolicyOptions as Ir, CatalogExecutorProviderOptions as It, IntegrationCatalogFreshnessResult as J, TangleIntegrationsClient as Jn, assertValidIntegrationManifest as Jt, ACTIVEPIECES_PUBLIC_CATALOG_URL as K, TangleIntegrationInvokeInput as Kn, ManifestValidationResult as Kt, buildTangleCatalogRuntimePackageManifest as L, OAuthClientCredentials as Ln, InMemoryIntegrationApprovalStore as Lr, createCatalogExecutorProvider as Lt, TangleIntegrationCatalogFreshnessResult as M, createConnectionCredentialResolver as Mn, CanonicalLaunchConnectorOptions as Mr, redactCapability as Mt, TangleIntegrationContract as N, createCredentialBackedAdapterProvider as Nn, buildCanonicalLaunchConnectors as Nr, redactInvocationEnvelope as Nt, TangleCatalogRuntimePackageManifestOptions as O, ConnectionCredentialResolverOptions as On, IntegrationSandboxBundle as Or, buildIntegrationInvocationEnvelope as Ot, TangleIntegrationContractStatus as P, resolveConnectionCredentials as Pn, canonicalActionConnectorId as Pr, validateIntegrationInvocationEnvelope as Pt, ActivepiecesExecutorProviderOptions as Q, AppsOwnerPolicy as Qn, validateIntegrationManifest as Qt, buildTangleIntegrationCatalogConnectors as R, adapterManifestsToConnectors as Rn, IntegrationApprovalFilter as Rr, PlatformIntegrationPolicyPresetOptions as Rt, canonicalIntegrationKind as S, WorkspaceCapability as Sn, IntegrationRequirementMode as Sr, IntegrationInvocationEnvelope as St, TangleCatalogExecutorInvocation as T, WorkspaceTrigger as Tn, IntegrationRuntime as Tr, IntegrationSandboxHostHub as Tt, listTangleIntegrationContracts as U, RenderConsentOptions as Un, resolveIntegrationApproval as Ur, validateProviderPassthroughRequest as Ut, listTangleIntegrationCatalogEntries as V, manifestToConnector as Vn, IntegrationApprovalStore as Vr, ProviderHttpRequestInput as Vt, listTangleNativeAdapterIds as W, renderApprovalCopy as Wn, IntegrationError as Wr, InferIntegrationRequirementsOptions as Wt, extractActivepiecesPublicPieceCount as X, createTangleIntegrationsClient as Xn, explainMissingRequirements as Xt, auditIntegrationCatalogFreshness as Y, TangleIntegrationsClientOptions as Yn, calendarExercisePlannerManifest as Yt, ActivepiecesExecutorInvocation as Z, AppSummary as Zn, inferIntegrationManifestFromTools as Zt, createMockIntegrationProvider as _, IntegrationWorkflowRuntimeHub as _n, IntegrationGrant as _r, OpenApiDocument as _t, IntegrationHubAuth as a, runIntegrationHealthcheck as an, requireBrokerGrantReceipt as ar, buildActivepiecesConnectors as at, verifyCapabilityToken as b, createIntegrationWorkflowRuntime as bn, IntegrationManifestResolution as br, importMcpConnector as bt, IntegrationHubRequestError as c, IntegrationEventStore as cn, IntegrationBridgeToolBinding as cr, GatewayCatalogEntry as ct, MintCapabilityBundleInput as d, receiveIntegrationWebhook as dn, decodeIntegrationBridgePayload as dr, createGatewayCatalogProvider as dt, IntegrationHealthcheckCheck as en, RegisterAppInput as er, ACTIVEPIECES_OVERRIDES as et, ResolveManifestInput as f, storedEventToTriggerEvent as fn, encodeIntegrationBridgePayload as fr, normalizeGatewayCatalog as ft, createHttpIntegrationProvider as g, IntegrationWorkflowRuntime as gn, IntegrationCapabilityBinding as gr, McpCatalogTool as gt, IntegrationHub as h, IntegrationWorkflowDefinition as hn, InMemoryIntegrationGrantStore as hr, McpCatalog as ht, CreateGrantsInput as i, healthcheckRequest as in, createTangleAppsClient as ir, ActivepiecesCatalogEntry as it, TangleIntegrationCatalogFreshnessOptions as j, InMemoryIntegrationSecretStore as jn, CanonicalIntegrationActionId as jr, normalizeIntegrationResult as jt, TangleCatalogTriggerInvocation as k, CredentialBackedAdapterProviderOptions as kn, createIntegrationRuntime as kr, dispatchIntegrationInvocation as kt, IntegrationOwnerPolicy as l, IntegrationWebhookReceiverResult as ln, buildIntegrationBridgeEnvironment as lr, GatewayCatalogProviderOptions as lt, InMemoryConnectionStore as m, InstalledIntegrationWorkflow as mn, redactIntegrationBridgePayload as mr, ImportCatalogOptions as mt, CheckConnectorInput as n, IntegrationHealthcheckStatus as nn, TangleAppsClient as nr, getActivepiecesOverride as nt, IntegrationHubClient as o, runIntegrationHealthchecks as on, DEFAULT_INTEGRATION_BRIDGE_ENV as or, listActivepiecesCatalogEntries as ot, createIntegrationHubClient as p, InMemoryIntegrationWorkflowStore as pn, parseIntegrationBridgeEnvironment as pr, GraphqlOperationSpec as pt, IntegrationCatalogFreshnessOptions as q, TangleIntegrationInvokeResult as qn, MissingRequirementExplanation as qt, CheckConnectorResult as r, IntegrationHealthcheckStore as rn, TangleAppsClientOptions as rr, ActivepiecesCatalogAuthField as rt, IntegrationHubClientOptions as s, InMemoryIntegrationEventStore as sn, IntegrationBridgePayload as sr, GatewayCatalogAction as st, CapabilityBundleResult as t, IntegrationHealthcheckResult as tn, RegisteredApp as tr, ActivepiecesPieceOverride as tt, ListGrantsInput as u, StoredIntegrationEvent as un, buildIntegrationBridgePayload as ur, GatewayCatalogTrigger as ut, sanitizeConnection as v, IntegrationWorkflowRuntimeOptions as vn, IntegrationGrantStore as vr, OpenApiOperation as vt, TANGLE_INTEGRATIONS_CATALOG_SOURCE as w, WorkspaceToolSchema as wn, IntegrationRequirementStatus as wr, IntegrationSandboxHost as wt, INTEGRATION_KIND_ALIASES as x, DiscoverWorkspaceCapabilitiesInput as xn, IntegrationRequirement as xr, importOpenApiConnector as xt, signCapability as y, IntegrationWorkflowStore as yn, IntegrationManifest as yr, importGraphqlConnector as yt, createTangleCatalogExecutorProvider as z, createConnectorAdapterCatalogSource as zn, IntegrationApprovalRecord as zr, createPlatformIntegrationPolicyPreset as zt };
-//# sourceMappingURL=consumer-BC6pCUzI.d.ts.map
+export { getActivepiecesOverride as $, TangleAppsClient as $n, IntegrationHealthcheckStatus as $t, TangleIntegrationContract as A, createCredentialBackedAdapterProvider as An, buildCanonicalLaunchConnectors as Ar, redactInvocationEnvelope as At, listTangleIntegrationContracts as B, RenderConsentOptions as Bn, resolveIntegrationApproval as Br, validateProviderPassthroughRequest as Bt, TangleCatalogExecutorProviderOptions as C, discoverWorkspaceCapabilities as Cn, IntegrationRuntimeHub as Cr, IntegrationSandboxHostOptions as Ct, TangleIntegrationCatalogEntry as D, InMemoryIntegrationOAuthStateStore as Dn, CANONICAL_INTEGRATION_ACTIONS as Dr, invocationRequestFromEnvelope as Dt, TangleCatalogTriggerInvocation as E, CredentialBackedAdapterProviderOptions as En, createIntegrationRuntime as Er, dispatchIntegrationInvocation as Et, buildTangleIntegrationCatalogConnectors as F, adapterManifestsToConnectors as Fn, IntegrationApprovalFilter as Fr, PlatformIntegrationPolicyPresetOptions as Ft, IntegrationCatalogFreshnessResult as G, TangleIntegrationsClient as Gn, assertValidIntegrationManifest as Gt, renderTangleCatalogRuntimePnpmAddCommand as H, renderConsentSummary as Hn, IntegrationErrorRuntimeCode as Hr, ManifestValidationIssue as Ht, createTangleCatalogExecutorProvider as I, createConnectorAdapterCatalogSource as In, IntegrationApprovalRecord as Ir, createPlatformIntegrationPolicyPreset as It, ActivepiecesExecutorInvocation as J, AppSummary as Jn, inferIntegrationManifestFromTools as Jt, auditIntegrationCatalogFreshness as K, TangleIntegrationsClientOptions as Kn, calendarExercisePlannerManifest as Kt, extractExternalCatalogPublicCount as L, createConnectorAdapterProvider as Ln, IntegrationApprovalStatus as Lr, PROVIDER_PASSTHROUGH_ACTION as Lt, TangleIntegrationImplementationKind as M, revokeConnection as Mn, ApprovalBackedPolicyEngine as Mr, CatalogExecutorInvocation as Mt, auditTangleIntegrationCatalogFreshness as N, ConnectorAdapterProviderOptions as Nn, ApprovalBackedPolicyOptions as Nr, CatalogExecutorProviderOptions as Nt, TangleIntegrationCatalogFreshnessOptions as O, InMemoryIntegrationSecretStore as On, CanonicalIntegrationActionId as Or, normalizeIntegrationResult as Ot, buildTangleCatalogRuntimePackageManifest as P, OAuthClientCredentials as Pn, InMemoryIntegrationApprovalStore as Pr, createCatalogExecutorProvider as Pt, ActivepiecesPieceOverride as Q, RegisteredApp as Qn, IntegrationHealthcheckResult as Qt, listTangleIntegrationCatalogEntries as R, manifestToConnector as Rn, IntegrationApprovalStore as Rr, ProviderHttpRequestInput as Rt, TangleCatalogExecutorInvocation as S, WorkspaceTrigger as Sn, IntegrationRuntime as Sr, IntegrationSandboxHostHub as St, TangleCatalogRuntimePackageManifestOptions as T, ConnectionCredentialResolverOptions as Tn, IntegrationSandboxBundle as Tr, buildIntegrationInvocationEnvelope as Tt, ACTIVEPIECES_PUBLIC_CATALOG_URL as U, TangleIntegrationInvokeInput as Un, ManifestValidationResult as Ut, listTangleNativeAdapterIds as V, renderApprovalCopy as Vn, IntegrationError as Vr, InferIntegrationRequirementsOptions as Vt, IntegrationCatalogFreshnessOptions as W, TangleIntegrationInvokeResult as Wn, MissingRequirementExplanation as Wt, createActivepiecesExecutorProvider as X, BrokerToken as Xn, InMemoryIntegrationHealthcheckStore as Xt, ActivepiecesExecutorProviderOptions as Y, AppsOwnerPolicy as Yn, validateIntegrationManifest as Yt, ACTIVEPIECES_OVERRIDES as Z, RegisterAppInput as Zn, IntegrationHealthcheckCheck as Zt, sanitizeConnection as _, createIntegrationWorkflowRuntime as _n, IntegrationManifestResolution as _r, importMcpConnector as _t, IntegrationHubAuth as a, IntegrationEventStore as an, IntegrationBridgeToolBinding as ar, GatewayCatalogEntry as at, TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID as b, WorkspaceCapabilityDiscovery as bn, IntegrationRequirementResolution as br, IntegrationInvocationEnvelopeValidationOptions as bt, IntegrationHubRequestError as c, receiveIntegrationWebhook as cn, decodeIntegrationBridgePayload as cr, createGatewayCatalogProvider as ct, MintCapabilityBundleInput as d, InstalledIntegrationWorkflow as dn, redactIntegrationBridgePayload as dr, ImportCatalogOptions as dt, IntegrationHealthcheckStore as en, TangleAppsClientOptions as er, ActivepiecesCatalogAuthField as et, ResolveManifestInput as f, IntegrationWorkflowDefinition as fn, InMemoryIntegrationGrantStore as fr, McpCatalog as ft, createMockIntegrationProvider as g, IntegrationWorkflowStore as gn, IntegrationManifest as gr, importGraphqlConnector as gt, createHttpIntegrationProvider as h, IntegrationWorkflowRuntimeOptions as hn, IntegrationGrantStore as hr, OpenApiOperation as ht, CreateGrantsInput as i, InMemoryIntegrationEventStore as in, IntegrationBridgePayload as ir, GatewayCatalogAction as it, TangleIntegrationContractStatus as j, resolveConnectionCredentials as jn, canonicalActionConnectorId as jr, validateIntegrationInvocationEnvelope as jt, TangleIntegrationCatalogFreshnessResult as k, createConnectionCredentialResolver as kn, CanonicalLaunchConnectorOptions as kr, redactCapability as kt, IntegrationOwnerPolicy as l, storedEventToTriggerEvent as ln, encodeIntegrationBridgePayload as lr, normalizeGatewayCatalog as lt, InMemoryConnectionStore as m, IntegrationWorkflowRuntimeHub as mn, IntegrationGrant as mr, OpenApiDocument as mt, CheckConnectorInput as n, runIntegrationHealthcheck as nn, requireBrokerGrantReceipt as nr, buildActivepiecesConnectors as nt, IntegrationHubClient as o, IntegrationWebhookReceiverResult as on, buildIntegrationBridgeEnvironment as or, GatewayCatalogProviderOptions as ot, createIntegrationHubClient as p, IntegrationWorkflowRuntime as pn, IntegrationCapabilityBinding as pr, McpCatalogTool as pt, extractActivepiecesPublicPieceCount as q, createTangleIntegrationsClient as qn, explainMissingRequirements as qt, CheckConnectorResult as r, runIntegrationHealthchecks as rn, DEFAULT_INTEGRATION_BRIDGE_ENV as rr, listActivepiecesCatalogEntries as rt, IntegrationHubClientOptions as s, StoredIntegrationEvent as sn, buildIntegrationBridgePayload as sr, GatewayCatalogTrigger as st, CapabilityBundleResult as t, healthcheckRequest as tn, createTangleAppsClient as tr, ActivepiecesCatalogEntry as tt, ListGrantsInput as u, InMemoryIntegrationWorkflowStore as un, parseIntegrationBridgeEnvironment as ur, GraphqlOperationSpec as ut, INTEGRATION_KIND_ALIASES as v, DiscoverWorkspaceCapabilitiesInput as vn, IntegrationRequirement as vr, importOpenApiConnector as vt, TangleCatalogRuntimePackageManifest as w, filterDiscoveryByWorkspaceScopes as wn, IntegrationRuntimeOptions as wr, NormalizedIntegrationResult as wt, TANGLE_INTEGRATIONS_CATALOG_SOURCE as x, WorkspaceToolSchema as xn, IntegrationRequirementStatus as xr, IntegrationSandboxHost as xt, canonicalIntegrationKind as y, WorkspaceCapability as yn, IntegrationRequirementMode as yr, IntegrationInvocationEnvelope as yt, listTangleIntegrationCatalogRuntimePackages as z, ConsentSummary as zn, createApprovalBackedPolicyEngine as zr, ProviderPassthroughPolicy as zt };
+//# sourceMappingURL=consumer-zHtoJixe.d.ts.map

package/dist/{consumer-BC6pCUzI.d.ts.map → consumer-zHtoJixe.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"consumer-BC6pCUzI.d.ts","names":["_$__core_types_js0.IntegrationProvider"],"sources":["../src/core-error.ts","../src/approval.ts","../src/actions.ts","../src/runtime.ts","../src/bridge.ts","../src/apps.ts","../src/client.ts","../src/consent.ts","../src/adapter-provider.ts","../src/credentials.ts","../src/discovery.ts","../src/workflow.ts","../src/events.ts","../src/healthcheck.ts","../src/manifest.ts","../src/passthrough.ts","../src/presets.ts","../src/catalog-executor.ts","../src/sandbox.ts","../src/importers.ts","../src/gateway-catalog.ts","../src/activepieces-catalog.ts","../src/activepieces-overrides.ts","../src/activepieces-provider.ts","../src/catalog-freshness.ts","../src/tangle-catalog.ts","../src/integration-kind-aliases.ts","../src/index.ts","../src/consumer.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;KAYY;cAiBC,yBAAyB;WAGzB,MAAM;EAFjB,YACE,iBACS,MAAM;;;;KCrBP;UAEK;EACf;EACA,SAAS;EACT,QAAQ;EACR;EACA;EACA,aAAa;EACb;EACA;EACA,WAAW;;UAGI;EACf,IAAI,qBAAqB,QAAQ,yCAAyC;EAC1E,IAAI,QAAQ,4BAA4B;EACxC,KAAK,SAAS,4BAA4B,QAAQ,+BAA+B;;UAGlE;EACf,SAAS;EACT;EACA;EACA;EACA,QAAQ;;UAGO;EACf,MAAM;EACN,OAAO;EACP,QAAQ;EACR,YAAY;EACZ;;cAGW,4CAA4C;mBACtC;EAEjB,IAAI,qBAAqB;EAIzB,IAAI,QAAQ;EAIZ,KAAK,SAAQ,4BAAiC;;cAKnC,sCAAsC;mBAChC;mBACA;mBACA;mBACA;mBACA;EAEjB,YAAY,SAAS;EAQf,OAAO,KAAK;IAA4B,SAAS;MAAqB,QAAQ;UAkCtE;;iBAcA,iCAAiC,SAAS,8BAA8B;iBAIlE,2BAA2B;EAC/C,OAAO;EACP;EACA;EACA,YAAY;EACZ;EACA,WAAW;EACX,QAAQ;EACR,YAAY;IACV,QAAQ;;;cCrIC;WACX;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;;KAGU,sCACH,2CAA2C;UAEnC;EACf;EACA;;iBAGc,+BAA+B,UAAS,kCAAuC;iBAgB/E,2BAA2B;;;KChC/B;KACA;UAEK;EACf;EACA;EACA;EACA,MAAM;EACN;EACA;EACA;EACA;;UAGe;EACf;EACA;EACA,QAAQ;EACR,cAAc;EACd,WAAW;;UAGI;EACf,aAAa;EACb,QAAQ;EACR,YAAY;EACZ,gBAAgB;EAChB,aAAa;EACb;EACA;EACA;EACA;;UAGe;EACf,UAAU;EACV,OAAO;EACP,OAAO;EACP,SAAS;EACT,iBAAiB;;UAGF;EACf;EACA;EACA;EACA,OAAO;EACP,SAAS;EACT;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW;;UAGI;EACf,IAAI,kBAAkB,QAAQ,gCAAgC;EAC9D,IAAI,OAAO,mBAAmB;EAC9B,eAAe,oBAAoB,UAAU,mBAAmB,QAAQ,sBAAsB;EAC9F,cAAc,SAAS,mBAAmB,QAAQ,sBAAsB;EACxE,WAAW,qBAAqB,QAAQ,sBAAsB;EAC9D,QAAQ,kBAAkB;;UAGX;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,YAAY;;UAGG;EACf;EACA,SAAS;EACT,cAAc;EACd,YAAY;EACZ,OAAO;EACP;;UAGe;EACf,gBAAgB,QAAQ,uBAAuB;EAC/C,gBAAgB,OAAO,mBAAmB,QAAQ,2BAA2B;EAC7E,cAAc,uBAAuB,QAAQ,qCAAqC;EAClF,gBAAgB;IACd,SAAS;IACT;IACA;IACA;IACA;IACA,WAAW;MACT,QAAQ,+BAA+B;;UAG5B;EACf,KAAK;EACL,SAAS;EACT,YAAY;;cAGD,yCAAyC;mBACnC;EAEjB,IAAI,kBAAkB;EAItB,IAAI,OAAO;EAIX,eAAe,oBAAoB,UAAU,mBAAmB;EAMhE,cAAc,SAAS,mBAAmB;EAI1C,UAAU,qBAAqB;EAK/B,OAAO;;cAKI;mBACM;mBACA;mBACA;EAEjB,YAAY,SAAS;EAMf,YAAY,QAAQ;EAIpB,gBAAgB,UAAU,qBAAqB,OAAO,mBAAmB,QAAQ;EAejF,aAAa;IACjB,UAAU;IACV,OAAO;IACP,SAAS;IACT,WAAW;MACT,QAAQ;EA0BN,mBAAmB;IACvB;IACA;IACA,OAAO;IACP,SAAS;IACT;IACA,UAAU;MACR,QAAQ;UAiEE;;iBAgDA,yBAAyB,SAAS,4BAA4B;;;cC7UjE;UAEI;EACf;EACA;EACA,SAAS;EACT;EACA,OAAO;;UAGQ;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;iBAGc,8BAA8B,QAAQ,2BAA2B;iBA4BjE,+BAA+B,SAAS;iBAIxC,+BAA+B,kBAAkB;iBAMjD,kCACd,QAAQ,0BACR;EAAW;IACV;iBAOa,kCACd,KAAK,oCACL;EAAW;IACV;iBAOa,+BAA+B,SAAS,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;UC1DlE;;EAEf;;EAEA,mBAAmB;;EAEnB,cAAc;;UAGC;EACf,UAAU;IACR;IACA;IACA;IACA;MACE;;UAGW;EACf;EACA;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;UAGe,sBAAsB;;EAErC;;UAGe;;EAEf;EACA;EACA;EACA;;EAEA;EACA;EACA;;EAEA;;cAqBW;mBACM;mBACA;mBACA;EAEjB,YAAY,SAAS;;;;;;EAWf,YAAY,OAAO,kBAAkB,sBAAsB,QAAQ;;EAYnE,SAAS,sBAAsB,QAAQ;;EAO7C,UAAU,eAAe,sBAAsB;IAAU;;;;;;;EAWnD,gBAAgB;IACpB;IACA;IACA;IACA;IACA;MACE,QAAQ;;;;;;EA4BN,iBAAiB;IACrB;IACA;IACA;IACA;IACA;IACA;MACE,QAAQ;UAqBE;UA8BA;;iBA4CA,uBAAuB,SAAS,0BAA0B;;;iBA0E1D,0BAA0B,OAAO,aAAa;EAC5D;EAAqB;EAAkB;EAAsB;EAA2B;;EACpF;EAAiB;EAAsB;EAAqB;EAAkB;;;;UC1VnE;EACf;EACA,SAAS;EACT,MAAM;EACN;EACA,mBAAmB;EACnB,sBAAsB,MAAM,0CAA0C;;UAGvD,6BAA6B;EAC5C;EACA,QAAQ;EACR;EACA;EACA,WAAW;;UAGI,8BAA8B;EAC7C;EACA;EACA,SAAS;EACT;EACA;EACA,WAAW;;cAGA;mBACM;mBACA;mBACA;mBACA;EAEjB,YAAY,SAAS;EAUrB,SAAS;EAIT,SAAS,uBAAuB;EAgB1B,OAAO,mBAAmB,kBAAkB,OAAO,6BAA6B,UAAU,QAAQ,8BAA8B;;iBA8BxH,+BAA+B,SAAS,kCAAkC;;;UC1FzE;EACf;EACA;EACA;EACA;EACA;EACA;;UAGe;EACf;EACA,aAAa;;iBAGC,qBACd,sBAAsB,sBAAsB,+BAC5C,UAAS,uBACR;iBAkBa,mBAAmB;EACjC;EACA;EACA,QAAQ;EACR;IACE;;;;;UCjBa;EACf;;EAEA;;UAGe;EACf;EACA,OAAO;EACP,UAAU;EACV,oBAAoB,YAAY,0BAA0B,QAAQ,sBAAsB;;;;;;EAMxF,wBAAwB;IACtB,YAAY;IACZ,aAAa;QACT;;;;;;EAMN,sBAAsB;IAAS;QAC3B,QAAQ,iCACR;;;EAIJ,mBAAmB;EACnB,YAAY;;iBAGE,+BAA+B,SAAS,kCAAkC;iBAmW1E,6BACd,UAAU,oBACV,sBACC;iBAIa,oCAAoC;EAClD;EACA;EACA,UAAU;EACV;IACE;iBASY,oBAAoB,oBAAoB,SAAS,mBAAmB;;;UCnanE;EACf,SAAS;EACT,cAAc;EACd,WAAW;EACX,YAAY;EACZ,uBAAuB,YAAY,uBAAuB,OAAO,UAAU;;cA+BhE,0CAA0C;mBACpC;EAEjB,IAAI,KAAK,YAAY;EAIrB,IAAI,KAAK,WAAW,aAAa;EAIjC,OAAO,KAAK;;;;;cAQD,8CAA8C;mBACxC;EAEjB,IAAI,OAAO;EAIX,QAAQ,gBAAgB;EAQxB,MAAM;;iBAOQ,mCAAmC,SAAS,uCAAmC,YAEzC,0BAAwB,QAAQ;iBAuBhE,6BAA6B,OAAO,uBAAuB,SAAS,sCAAsC,QAAQ;KAgL5H,yCACV,KAAK,iFACH;;;;;EAMA,wBAAwB,OAAO,uCAAuC;;iBAG1D,sCAAsC,SAAS,yCAAyC;iBAoFlF,iBAAiB;EACrC,YAAY;EACZ,cAAc;EACd,UAAU;EACV,YAAY;IACV,QAAQ;;;;;;;UClWK;EACf;EACA;;EAEA;;EAEA;;;;UAKe;;EAEf;;EAEA;;EAEA;;EAEA,UAAU;;EAEV;;EAEA;;EAEA;;;;EAIA;;EAEA,MAAM;;EAEN,WAAW;;EAEX,YAAY;;;;;EAKZ;;;EAGA;;EAEA;;;;UAKe;EACf;EACA;EACA;EACA,UAAU;EACV;EACA;EACA;EACA;EACA,WAAW;EACX;EACA;;UAGe;;;EAGf,OAAO;;;;EAIP,cAAc;EACd,QAAQ;;;EAGR,aAAa;EACb,YAAY;;;;EAIZ;;;;EAIA;;UAGe;EACf,cAAc;EACd,UAAU;;EAEV,mBAAmB;;;;EAInB,uBAAuB;IAAQ;IAAqB;;;;;;iBAMhC,8BACpB,OAAO,qCACN,QAAQ;;;;;;;;;;;;;;;;;;;;;iBAmIK,iCACd,WAAW,8BACX,2BACA;EAAQ;IACP;;;UCnRc;EACf;EACA;EACA,UAAU;EACV;IACE;IACA;IACA;;EAEF,WAAW;;UAGI;EACf;EACA;EACA;EACA,OAAO;EACP,SAAS;EACT;EACA,cAAc;EACd;EACA;EACA,WAAW;;UAGI;EACf,IAAI,UAAU,+BAA+B;EAC7C,IAAI,aAAa,QAAQ,4CAA4C;EACrE,QAAQ,QAAQ,kCAAkC;EAClD,eAAe,qBAAqB,QAAQ,kCAAkC;EAC9E,YAAY,OAAO,mBAAmB,QAAQ,kCAAkC;;UAGjE;EACf,iBAAiB,sBAAsB,iBAAiB,qBAAqB,QAAQ,kCAAkC;;UAGxG;EACf,SAAS;EACT,KAAK;EACL,QAAQ;EACR,QAAQ;EACR,YAAY;;cAGD,4CAA4C;mBACtC;EAEjB,IAAI,UAAU;EAId,IAAI,aAAa;EAIjB,QAAQ;EAIR,eAAe,qBAAqB;EAIpC,YAAY,OAAO,mBAAmB;;cAK3B;mBACM;mBACA;mBACA;mBACA;mBACA;EAEjB,YAAY,SAAS;EAQf,QAAQ;IACZ,UAAU;IACV,OAAO;IACP,SAAS;MACP,QAAQ;EA6BN,cAAc,aAClB,OAAO,wBAAwB,IAC/B,UAAU;IAAS,OAAO,wBAAwB;IAAI,WAAW;QAAqC,uBACrG;IAAU,SAAS;;;iBAwCR,iCAAiC,SAAS,oCAAoC;;;UClK7E;EACf;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT;EACA,WAAW;;UAGI;EACf,IAAI,OAAO,yBAAyB;EACpC,iBAAiB,kBAAkB,0BAA0B;EAC7D,QAAQ,QAAQ,4BAA4B;;UAG7B;EACf;EACA;EACA,UAAU;EACV,UAAU;EACV,YAAY;;cAGD,yCAAyC;mBACnC;mBACA;EAEjB,IAAI,OAAO;EAKX,iBAAiB,kBAAkB;EAInC,QAAQ;;iBAKY,0BAA0B;EAC9C,SAAS;EACT,QAAQ;EACR;EACA,SAAS;EACT,OAAO;EACP,kBAAkB;EAClB;EACA,YAAY;IACV,QAAQ;iBA2CI,0BAA0B,OAAO,wBAAwB,QAAQ,qBAAqB;;;KChG1F;UAEK;EACf;EACA,QAAQ;EACR;EACA,WAAW;;UAGI;EACf;EACA;EACA;EACA,QAAQ;EACR;EACA,QAAQ;EACR,WAAW;;UAGI;EACf,IAAI,QAAQ,+BAA+B;EAC3C,IAAI,uBAAuB,QAAQ,4CAA4C;EAC/E,QAAQ,QAAQ,kCAAkC;;cAGvC,+CAA+C;mBACzC;EAEjB,IAAI,QAAQ;EAIZ,IAAI,uBAAuB;EAI3B,QAAQ;;iBAKY,0BAA0B;EAC9C,YAAY;EACZ,YAAY;EACZ,WAAW;EACX,QAAQ,YAAY,uBAAuB,WAAW,yBAAyB,QAAQ,qCAAqC;EAC5H,QAAQ;EACR,YAAY;IACV,QAAQ;iBAuCU,2BAA2B;EAC/C,aAAa;EACb,WAAW;EACX,QAAQ;EACR,QAAQ;EACR,YAAY;EACZ,QAAQ,YAAY,uBAAuB,WAAW,yBAAyB,QAAQ,qCAAqC;IAC1H,QAAQ;iBAgBI,mBAAmB,kBAAyB;;;UChH3C;EACf;EACA;;UAGe;EACf;EACA,QAAQ;;UAGO;EACf;EACA;EACA,OAAO;IAAiB;IAAgB;IAAiB,OAAO;IAA4B;IAAsB;;EAClH,WAAW;;UAGI;EACf;EACA;EACA;EACA;EACA;;iBAGc,4BAA4B,UAAU,sBAAsB;iBAuB5D,+BAA+B,UAAU;iBAOzC,kCAAkC,SAAS,sCAAsC;iBAqCjF,2BAA2B,YAAY,gCAAgC;iBAUvE,gCAAgC,cAAmC;;;UC3GlE;EACf;EACA;EACA,QAAQ;EACR,UAAU;EACV;;UAGe;EACf;EACA,iBAAiB;EACjB;EACA;;cAGW;iBAEG,mCACd,OAAO,0BACP,QAAQ;;;UCpBO,+CAA+C,KAAK;EACnE;EACA;EACA;;iBAGc,sCAAsC,UAAS,yCAA8C;;;UCO5F;EACf,YAAY;EACZ,SAAS;EACT,WAAW;EACX,QAAQ;;UAGO;EACf;EACA,MAAM;EACN,YAAY;EACZ,aAAa,SAAS,qBAAqB,QAAQ,mBAAmB;EACtE,gBAAgB,SAAS,wBAAwB,QAAQ,yBAAyB;EAClF,gBAAgB,YAAY,8BAA8B,QAAQ,2BAA2B;EAC7F,oBACE,YAAY,uBACZ,SAAS,YAAY,2CACrB,uBACG,QAAQ,kCAAkC;EAC/C,sBAAsB,2BAA2B;EACjD,yBAAyB,iBAAiB,QAAQ,2BAA2B;;iBAG/D,8BAA8B,SAAS,iCAAiC;;;UC5BvE;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW;;UAGI;EACf,aAAa;EACb;EACA;;KAGU;EACN;EAAc;EAAgB;EAAkB,WAAW;;EAC3D;EAA6B;EAAgB,UAAU;EAA4B,WAAW;;EAC9F;EAAkB;EAAgB;EAAe,WAAW;;UAEjD;EACf,qBAAqB,eAAe,SAAS,8BAA8B,QAAQ,2BAA2B;;UAG/F,sCAAsC;EACrD,KAAK;;iBAGS,mCAAmC;EACjD;EACA;EACA;EACA;EACA;EACA,WAAW;EACX;IACE;iBAgBY,8BACd,UAAU,+BACV,UAAS,iDACR;iBAWa,sCACd,UAAU,+BACV,UAAS;iBA8BK,yBAAyB,UAAU,gCAAgC,KAAK;EAAsD;;iBAS9H,iBAAiB,YAAY,wBAAwB;iBAOrD,2BAA2B,QAAQ,0BAA0B;iBA0BvD,8BACpB,UAAU,+BACV,SAAS,gCACR,QAAQ;cAiBE;mBACM;EAEjB,YAAY,SAAS;EAIrB,SAAS,UAAU,gCAAgC,QAAQ;;;;UC3K5C;EACf;EACA;EACA;EACA,WAAW;EACX,OAAO;EACP;EACA,YAAY;EACZ,cAAc;;UAGC;EACf;EACA;EACA;IAAS;;EACT,QAAQ,eAAe,eAAe;;UAGvB;EACf;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,MAAM;EACjB;;UAGe;EACf;EACA;EACA;EACA;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;IACE;IACA;IACA;IACA;;;UAIa;EACf,OAAO;;iBAKO,uBAAuB,UAAU,iBAAiB,SAAS,uBAAuB;iBAwBlF,uBAAuB,YAAY,wBAAwB,SAAS,uBAAuB;iBAc3F,mBAAmB,SAAS,YAAY,SAAS,uBAAuB;;;UCrFvE;EACf;EACA,MAAM,QAAQ;EACd,oBAAoB,QAAQ,yBAAyB;EACrD,aAAa,SAAS,qBAAqB,QAAQ,mBAAmB;EACtE,gBAAgB,SAAS,wBAAwB,QAAQ,yBAAyB;EAClF,gBAAgB,YAAY,uBAAuB,SAAS,6BAA6B,QAAQ,2BAA2B;EAC5H;EACA,YAAY;;UAGG;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,UAAU;EACV,WAAW;EACX,WAAW;;UAGI;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,YAAY;EACZ;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,YAAY;EACZ;;iBAGc,6BAA6B,SAAS,gCAAgC;iBAkCtE,wBACd,SAAS,uBACT;EAAW;EAAoB,cAAc;IAC5C;;;UC9Fc;EACf;EACA;EACA;EACA;EACA;EACA,UAAU;EACV,MAAM;EACN,aAAa;EACb;EACA,SAAS;IACP;IACA;IACA,MAAM;IACN;;EAEF,UAAU;IACR;IACA;IACA;;EAEF;IACE;IACA;IACA;;;UAIa;EACf;EACA;EACA;EACA;EACA;EACA;;iBASc,kCAAkC;iBAUlC,4BAA4B;EAC1C;EACA;EACA;IACO;;;UC/DQ;EACf,WAAW;EACX,cAAc,eAAe;EAC7B,mBAAmB;;cAGR,wBAAwB,eAAe;iBAoGpC,wBAAwB,aAAa;;;UC7FpC;EACf,YAAY;EACZ,SAAS;EACT,WAAW;EACX,cAAc;EACd;IACE;IACA;IACA;IACA;IACA;;;UAIa;EACf;EACA,aAAa;EACb,aAAa,SAAS,qBAAqB,QAAQ,mBAAmB;EACtE,gBAAgB,SAAS,wBAAwB,QAAQ,yBAAyB;EAClF,gBAAgB,YAAY,mCAAmC,QAAQ,2BAA2B;;iBAGpF,mCAAmC,SAAS,sCAAsC;;;UC1BjF;EACf;EACA;EACA;EACA,mBAAmB;;UAGJ;EACf;EACA;EACA;IACE;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,iBAAiB;IACjB,iBAAiB;;EAEnB;IACE;IACA;IACA;IACA;;EAEF;;cAGW;iBAQG,oCAAoC;iBAM9B,iCACpB,UAAS,qCACR,QAAQ;;;cC9BE;cACA;KAED;KACA;UAEK;EACf;EACA;EACA;EACA,UAAU;EACV,MAAM;EACN,aAAa;EACb;EACA,SAAS;IACP;IACA;IACA,MAAM;IACN;;EAEF,UAAU;IACR;IACA;IACA;;;UAIa;EACf;EACA;EACA;EACA,UAAU;EACV,MAAM;EACN,YAAY,YAAY;EACxB,SAAS;IACP;IACA;IACA,MAAM;IACN;;EAEF,UAAU;IACR;IACA;IACA;;EAEF;IACE,MAAM;IACN;IACA;;EAEF,QAAQ;EACR;IACE;IACA;IACA;IACA;IACA;IACA;;;UAIa;EACf;EACA;EACA;EACA,yBAAyB;;UAGV;EACf;EACA;EACA;EACA,cAAc;EACd;IACE;IACA;IACA,sBAAsB;;;UAIT;EACf,YAAY;EACZ,SAAS;EACT,WAAW;EACX,cAAc;EACd;IACE;IACA;IACA;IACA;IACA;;;UAIa;EACf,YAAY;EACZ,WAAW;EACX,cAAc;EACd,SAAS,YAAY;EACrB;EACA;IACE;IACA;IACA;IACA;IACA;;;UAIa;EACf;EACA,aAAa;EACb,aAAa,SAAS,qBAAqB,QAAQ,mBAAmB;EACtE,gBAAgB,SAAS,wBAAwB,QAAQ,yBAAyB;EAClF,gBAAgB,YAAY,oCAAoC,QAAQ,2BAA2B;EACnG,oBAAoB,YAAY,mCAAmC,QAAQ,kCAAkC;EAC7G,sBAAsB,2BAA2B;EACjD,yBAAyB,iBAAiB,QAAQ,2BAA2B;;KAGnE,2CAA2C;UAEtC;EACf;EACA;EACA;IACE;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,iBAAiB,QAAQ,kBAAkB;IAC3C,iBAAiB,QAAQ,kBAAkB;;EAE7C;IACE;IACA;IACA;IACA;;EAEF;;iBAGc;iBAYA,uCAAuC;iBAIvC,kCAAkC;iBAwClC,+CAA+C;EAC7D;EACA;EACA;;iBAac,yCACd,UAAS,6CACR;iBAuBa,yCAAyC;EACvD;EACA;;iBAac,wCAAwC;EACtD;EACA;EACA;IACO;iBAQO,oCAAoC,SAAS,uCAAAA;cAgEhD,0CAAiC;iBAExB,uCACpB,UAAS,2CACR,QAAQ;;;;cCpXE,0BAA0B,SAAS;iBAwBhC,yBAAyB;;;cCkC5B,mCAAmC;mBAC7B;EAEjB,IAAI,uBAAuB;EAI3B,IAAI,YAAY;EAIhB,YAAY,OAAO,mBAAmB;EAMtC,OAAO;;cAKI;mBACM;mBACA;mBACA;mBACA;mBACA;;;WAGR,aAAa;mBACL;mBACA;mBACA;mBACA;EAEjB,YAAY,SAAS;EAgBf,kBAAkB,QAAQ;EAK1B,aAAa,UAAS,oCAAyC,QAAQ;EAQvE,UAAU,oBAAoB,SAAS,mBAAmB,QAAQ;EAyBlE,aAAa,oBAAoB,SAAS,sBAAsB,QAAQ;EA6BxE,iBAAiB,YAAY,wBAAwB,QAAQ;EAK7D,gBAAgB,OAAO,mBAAmB,QAAQ;EAIlD,cAAc,uBAAuB,QAAQ;EAI7C,gBAAgB,SAAS,yBAAyB,QAAQ;EAkBhE,iBAAiB,gBAAgB;EAQ3B,qBAAqB,eAAe,SAAS,8BAA8B,QAAQ;EAyCnF,iBAAiB,sBAAsB,iBAAiB,qBAAqB,QAAQ;UAcnF;UAMM;UAMA;UAMN;;iBAUM,mBAAmB,YAAY,wBAAwB;iBAiBvD,8BAA8B;EAC5C;EACA,aAAa;EACb,YAAY,YAAY,uBAAuB,SAAS,6BAA6B,0BAA0B,QAAQ;IAChH;iBAsDO,8BAA8B,SAAS,iCAAiC;iBAqCxE,eAAe,YAAY,uBAAuB;iBAMlD,sBAAsB,eAAe,iBAAiB;;;KC/V1D;EAEN;;EAEA;;;;EAIA;;EAGA;;EAEA;;UAGW;;;EAGf;;EAEA,MAAM;;EAEN;;EAEA,mBAAmB;;EAEnB;;;EAGA;;;;;;EAMA,cAAc;;UAGC;EACf,UAAU;IACR;IACA;IACA,UAAU;IACV;MACE;;;;;;cAOO,mCAAmC;WACrC;;WAEA;;;WAGA;;WAEA;;WAEA;EAET,YAAY;IACV;IACA;IACA;IACA;IACA;;;UAUa;;EAEf;EACA,UAAU;;EAEV;;UAGe;;EAEf;;EAEA,SAAS;EACT,UAAU;EACV,WAAW;;UAGI;;EAEf;;EAEA,UAAU;;UAGK;;EAEf;;EAEA,SAAS;;EAET;;EAEA;EACA,UAAU;;EAEV;;UAGe;EACf,QAAQ;;;EAGR,KAAK;;UAGU;;EAEf;;EAEA;;EAEA,OAAO;EACP;EACA;;UAGe;;EAEf;;EAEA,aAAa;;EAEb,YAAY;;;;;;cAOD;mBACM;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;EAEjB,YAAY,SAAS;;;;;;;EAuCf,gBAAgB,OAAO,uBAAuB,QAAQ;;;;;;EAetD,eAAe,OAAO,sBAAsB,QAAQ;;;;EAyCpD,aAAa,OAAO,oBAAoB,QAAQ;;EAgBhD,WAAW,OAAO,kBAAkB,QAAQ;;;;EAgB5C,qBAAqB,OAAO,4BAA4B,QAAQ;;EAgBhE,gBAAgB;IAAS;MAAmB,QAAQ;UAUlD;UAaM;;iBAkGA,2BACd,SAAS,8BACR"}
+{"version":3,"file":"consumer-zHtoJixe.d.ts","names":["_$__core_types_js0.IntegrationProvider"],"sources":["../src/core-error.ts","../src/approval.ts","../src/actions.ts","../src/runtime.ts","../src/bridge.ts","../src/apps.ts","../src/client.ts","../src/consent.ts","../src/adapter-provider.ts","../src/credentials.ts","../src/discovery.ts","../src/workflow.ts","../src/events.ts","../src/healthcheck.ts","../src/manifest.ts","../src/passthrough.ts","../src/presets.ts","../src/catalog-executor.ts","../src/sandbox.ts","../src/importers.ts","../src/gateway-catalog.ts","../src/activepieces-catalog.ts","../src/activepieces-overrides.ts","../src/activepieces-provider.ts","../src/catalog-freshness.ts","../src/tangle-catalog.ts","../src/integration-kind-aliases.ts","../src/index.ts","../src/consumer.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;KAYY;cAiBC,yBAAyB;WAGzB,MAAM;EAFjB,YACE,iBACS,MAAM;;;;KCrBP;UAEK;EACf;EACA,SAAS;EACT,QAAQ;EACR;EACA;EACA,aAAa;EACb;EACA;EACA,WAAW;;UAGI;EACf,IAAI,qBAAqB,QAAQ,yCAAyC;EAC1E,IAAI,QAAQ,4BAA4B;EACxC,KAAK,SAAS,4BAA4B,QAAQ,+BAA+B;;UAGlE;EACf,SAAS;EACT;EACA;EACA;EACA,QAAQ;;UAGO;EACf,MAAM;EACN,OAAO;EACP,QAAQ;EACR,YAAY;EACZ;;cAGW,4CAA4C;mBACtC;EAEjB,IAAI,qBAAqB;EAIzB,IAAI,QAAQ;EAIZ,KAAK,SAAQ,4BAAiC;;cAKnC,sCAAsC;mBAChC;mBACA;mBACA;mBACA;mBACA;EAEjB,YAAY,SAAS;EAQf,OAAO,KAAK;IAA4B,SAAS;MAAqB,QAAQ;UAkCtE;;iBAcA,iCAAiC,SAAS,8BAA8B;iBAIlE,2BAA2B;EAC/C,OAAO;EACP;EACA;EACA,YAAY;EACZ;EACA,WAAW;EACX,QAAQ;EACR,YAAY;IACV,QAAQ;;;cCrIC;WACX;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;;KAGU,sCACH,2CAA2C;UAEnC;EACf;EACA;;iBAGc,+BAA+B,UAAS,kCAAuC;iBAgB/E,2BAA2B;;;KChC/B;KACA;UAEK;EACf;EACA;EACA;EACA,MAAM;EACN;EACA;EACA;EACA;;UAGe;EACf;EACA;EACA,QAAQ;EACR,cAAc;EACd,WAAW;;UAGI;EACf,aAAa;EACb,QAAQ;EACR,YAAY;EACZ,gBAAgB;EAChB,aAAa;EACb;EACA;EACA;EACA;;UAGe;EACf,UAAU;EACV,OAAO;EACP,OAAO;EACP,SAAS;EACT,iBAAiB;;UAGF;EACf;EACA;EACA;EACA,OAAO;EACP,SAAS;EACT;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW;;UAGI;EACf,IAAI,kBAAkB,QAAQ,gCAAgC;EAC9D,IAAI,OAAO,mBAAmB;EAC9B,eAAe,oBAAoB,UAAU,mBAAmB,QAAQ,sBAAsB;EAC9F,cAAc,SAAS,mBAAmB,QAAQ,sBAAsB;EACxE,WAAW,qBAAqB,QAAQ,sBAAsB;EAC9D,QAAQ,kBAAkB;;UAGX;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,YAAY;;UAGG;EACf;EACA,SAAS;EACT,cAAc;EACd,YAAY;EACZ,OAAO;EACP;;UAGe;EACf,gBAAgB,QAAQ,uBAAuB;EAC/C,gBAAgB,OAAO,mBAAmB,QAAQ,2BAA2B;EAC7E,cAAc,uBAAuB,QAAQ,qCAAqC;EAClF,gBAAgB;IACd,SAAS;IACT;IACA;IACA;IACA;IACA,WAAW;MACT,QAAQ,+BAA+B;;UAG5B;EACf,KAAK;EACL,SAAS;EACT,YAAY;;cAGD,yCAAyC;mBACnC;EAEjB,IAAI,kBAAkB;EAItB,IAAI,OAAO;EAIX,eAAe,oBAAoB,UAAU,mBAAmB;EAMhE,cAAc,SAAS,mBAAmB;EAI1C,UAAU,qBAAqB;EAK/B,OAAO;;cAKI;mBACM;mBACA;mBACA;EAEjB,YAAY,SAAS;EAMf,YAAY,QAAQ;EAIpB,gBAAgB,UAAU,qBAAqB,OAAO,mBAAmB,QAAQ;EAejF,aAAa;IACjB,UAAU;IACV,OAAO;IACP,SAAS;IACT,WAAW;MACT,QAAQ;EA0BN,mBAAmB;IACvB;IACA;IACA,OAAO;IACP,SAAS;IACT;IACA,UAAU;MACR,QAAQ;UAiEE;;iBAgDA,yBAAyB,SAAS,4BAA4B;;;cC7UjE;UAEI;EACf;EACA;EACA,SAAS;EACT;EACA,OAAO;;UAGQ;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;iBAGc,8BAA8B,QAAQ,2BAA2B;iBA4BjE,+BAA+B,SAAS;iBAIxC,+BAA+B,kBAAkB;iBAMjD,kCACd,QAAQ,0BACR;EAAW;IACV;iBAOa,kCACd,KAAK,oCACL;EAAW;IACV;iBAOa,+BAA+B,SAAS,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;UC1DlE;;EAEf;;EAEA,mBAAmB;;EAEnB,cAAc;;UAGC;EACf,UAAU;IACR;IACA;IACA;IACA;MACE;;UAGW;EACf;EACA;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;UAGe,sBAAsB;;EAErC;;UAGe;;EAEf;EACA;EACA;EACA;;EAEA;EACA;EACA;;EAEA;;cAqBW;mBACM;mBACA;mBACA;EAEjB,YAAY,SAAS;;;;;;EAWf,YAAY,OAAO,kBAAkB,sBAAsB,QAAQ;;EAYnE,SAAS,sBAAsB,QAAQ;;EAO7C,UAAU,eAAe,sBAAsB;IAAU;;;;;;;EAWnD,gBAAgB;IACpB;IACA;IACA;IACA;IACA;MACE,QAAQ;;;;;;EA4BN,iBAAiB;IACrB;IACA;IACA;IACA;IACA;IACA;MACE,QAAQ;UAqBE;UA8BA;;iBA4CA,uBAAuB,SAAS,0BAA0B;;;iBA0E1D,0BAA0B,OAAO,aAAa;EAC5D;EAAqB;EAAkB;EAAsB;EAA2B;;EACpF;EAAiB;EAAsB;EAAqB;EAAkB;;;;UC1VnE;EACf;EACA,SAAS;EACT,MAAM;EACN;EACA,mBAAmB;EACnB,sBAAsB,MAAM,0CAA0C;;UAGvD,6BAA6B;EAC5C;EACA,QAAQ;EACR;EACA;EACA,WAAW;;UAGI,8BAA8B;EAC7C;EACA;EACA,SAAS;EACT;EACA;EACA,WAAW;;cAGA;mBACM;mBACA;mBACA;mBACA;EAEjB,YAAY,SAAS;EAUrB,SAAS;EAIT,SAAS,uBAAuB;EAgB1B,OAAO,mBAAmB,kBAAkB,OAAO,6BAA6B,UAAU,QAAQ,8BAA8B;;iBA8BxH,+BAA+B,SAAS,kCAAkC;;;UC1FzE;EACf;EACA;EACA;EACA;EACA;EACA;;UAGe;EACf;EACA,aAAa;;iBAGC,qBACd,sBAAsB,sBAAsB,+BAC5C,UAAS,uBACR;iBAkBa,mBAAmB;EACjC;EACA;EACA,QAAQ;EACR;IACE;;;;;UCjBa;EACf;;EAEA;;UAGe;EACf;EACA,OAAO;EACP,UAAU;EACV,oBAAoB,YAAY,0BAA0B,QAAQ,sBAAsB;;;;;;EAMxF,wBAAwB;IACtB,YAAY;IACZ,aAAa;QACT;;;;;;EAMN,sBAAsB;IAAS;QAC3B,QAAQ,iCACR;;;EAIJ,mBAAmB;EACnB,YAAY;;iBAGE,+BAA+B,SAAS,kCAAkC;iBAmW1E,6BACd,UAAU,oBACV,sBACC;iBAIa,oCAAoC;EAClD;EACA;EACA,UAAU;EACV;IACE;iBASY,oBAAoB,oBAAoB,SAAS,mBAAmB;;;UCnanE;EACf,SAAS;EACT,cAAc;EACd,WAAW;EACX,YAAY;EACZ,uBAAuB,YAAY,uBAAuB,OAAO,UAAU;;cA+BhE,0CAA0C;mBACpC;EAEjB,IAAI,KAAK,YAAY;EAIrB,IAAI,KAAK,WAAW,aAAa;EAIjC,OAAO,KAAK;;;;;cAQD,8CAA8C;mBACxC;EAEjB,IAAI,OAAO;EAIX,QAAQ,gBAAgB;EAQxB,MAAM;;iBAOQ,mCAAmC,SAAS,uCAAmC,YAEzC,0BAAwB,QAAQ;iBAuBhE,6BAA6B,OAAO,uBAAuB,SAAS,sCAAsC,QAAQ;KAgL5H,yCACV,KAAK,iFACH;;;;;EAMA,wBAAwB,OAAO,uCAAuC;;iBAG1D,sCAAsC,SAAS,yCAAyC;iBAoFlF,iBAAiB;EACrC,YAAY;EACZ,cAAc;EACd,UAAU;EACV,YAAY;IACV,QAAQ;;;;;;;UClWK;EACf;EACA;;EAEA;;EAEA;;;;UAKe;;EAEf;;EAEA;;EAEA;;EAEA,UAAU;;EAEV;;EAEA;;EAEA;;;;EAIA;;EAEA,MAAM;;EAEN,WAAW;;EAEX,YAAY;;;;;EAKZ;;;EAGA;;EAEA;;;;UAKe;EACf;EACA;EACA;EACA,UAAU;EACV;EACA;EACA;EACA;EACA,WAAW;EACX;EACA;;UAGe;;;EAGf,OAAO;;;;EAIP,cAAc;EACd,QAAQ;;;EAGR,aAAa;EACb,YAAY;;;;EAIZ;;;;EAIA;;UAGe;EACf,cAAc;EACd,UAAU;;EAEV,mBAAmB;;;;EAInB,uBAAuB;IAAQ;IAAqB;;;;;;iBAMhC,8BACpB,OAAO,qCACN,QAAQ;;;;;;;;;;;;;;;;;;;;;iBAmIK,iCACd,WAAW,8BACX,2BACA;EAAQ;IACP;;;UCnRc;EACf;EACA;EACA,UAAU;EACV;IACE;IACA;IACA;;EAEF,WAAW;;UAGI;EACf;EACA;EACA;EACA,OAAO;EACP,SAAS;EACT;EACA,cAAc;EACd;EACA;EACA,WAAW;;UAGI;EACf,IAAI,UAAU,+BAA+B;EAC7C,IAAI,aAAa,QAAQ,4CAA4C;EACrE,QAAQ,QAAQ,kCAAkC;EAClD,eAAe,qBAAqB,QAAQ,kCAAkC;EAC9E,YAAY,OAAO,mBAAmB,QAAQ,kCAAkC;;UAGjE;EACf,iBAAiB,sBAAsB,iBAAiB,qBAAqB,QAAQ,kCAAkC;;UAGxG;EACf,SAAS;EACT,KAAK;EACL,QAAQ;EACR,QAAQ;EACR,YAAY;;cAGD,4CAA4C;mBACtC;EAEjB,IAAI,UAAU;EAId,IAAI,aAAa;EAIjB,QAAQ;EAIR,eAAe,qBAAqB;EAIpC,YAAY,OAAO,mBAAmB;;cAK3B;mBACM;mBACA;mBACA;mBACA;mBACA;EAEjB,YAAY,SAAS;EAQf,QAAQ;IACZ,UAAU;IACV,OAAO;IACP,SAAS;MACP,QAAQ;EA6BN,cAAc,aAClB,OAAO,wBAAwB,IAC/B,UAAU;IAAS,OAAO,wBAAwB;IAAI,WAAW;QAAqC,uBACrG;IAAU,SAAS;;;iBAwCR,iCAAiC,SAAS,oCAAoC;;;UClK7E;EACf;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT;EACA,WAAW;;UAGI;EACf,IAAI,OAAO,yBAAyB;EACpC,iBAAiB,kBAAkB,0BAA0B;EAC7D,QAAQ,QAAQ,4BAA4B;;UAG7B;EACf;EACA;EACA,UAAU;EACV,UAAU;EACV,YAAY;;cAGD,yCAAyC;mBACnC;mBACA;EAEjB,IAAI,OAAO;EAKX,iBAAiB,kBAAkB;EAInC,QAAQ;;iBAKY,0BAA0B;EAC9C,SAAS;EACT,QAAQ;EACR;EACA,SAAS;EACT,OAAO;EACP,kBAAkB;EAClB;EACA,YAAY;IACV,QAAQ;iBA2CI,0BAA0B,OAAO,wBAAwB,QAAQ,qBAAqB;;;KChG1F;UAEK;EACf;EACA,QAAQ;EACR;EACA,WAAW;;UAGI;EACf;EACA;EACA;EACA,QAAQ;EACR;EACA,QAAQ;EACR,WAAW;;UAGI;EACf,IAAI,QAAQ,+BAA+B;EAC3C,IAAI,uBAAuB,QAAQ,4CAA4C;EAC/E,QAAQ,QAAQ,kCAAkC;;cAGvC,+CAA+C;mBACzC;EAEjB,IAAI,QAAQ;EAIZ,IAAI,uBAAuB;EAI3B,QAAQ;;iBAKY,0BAA0B;EAC9C,YAAY;EACZ,YAAY;EACZ,WAAW;EACX,QAAQ,YAAY,uBAAuB,WAAW,yBAAyB,QAAQ,qCAAqC;EAC5H,QAAQ;EACR,YAAY;IACV,QAAQ;iBAuCU,2BAA2B;EAC/C,aAAa;EACb,WAAW;EACX,QAAQ;EACR,QAAQ;EACR,YAAY;EACZ,QAAQ,YAAY,uBAAuB,WAAW,yBAAyB,QAAQ,qCAAqC;IAC1H,QAAQ;iBAgBI,mBAAmB,kBAAyB;;;UChH3C;EACf;EACA;;UAGe;EACf;EACA,QAAQ;;UAGO;EACf;EACA;EACA,OAAO;IAAiB;IAAgB;IAAiB,OAAO;IAA4B;IAAsB;;EAClH,WAAW;;UAGI;EACf;EACA;EACA;EACA;EACA;;iBAGc,4BAA4B,UAAU,sBAAsB;iBAuB5D,+BAA+B,UAAU;iBAOzC,kCAAkC,SAAS,sCAAsC;iBAqCjF,2BAA2B,YAAY,gCAAgC;iBAUvE,gCAAgC,cAAmC;;;UC3GlE;EACf;EACA;EACA,QAAQ;EACR,UAAU;EACV;;UAGe;EACf;EACA,iBAAiB;EACjB;EACA;;cAGW;iBAEG,mCACd,OAAO,0BACP,QAAQ;;;UCpBO,+CAA+C,KAAK;EACnE;EACA;EACA;;iBAGc,sCAAsC,UAAS,yCAA8C;;;UCO5F;EACf,YAAY;EACZ,SAAS;EACT,WAAW;EACX,QAAQ;;UAGO;EACf;EACA,MAAM;EACN,YAAY;EACZ,aAAa,SAAS,qBAAqB,QAAQ,mBAAmB;EACtE,gBAAgB,SAAS,wBAAwB,QAAQ,yBAAyB;EAClF,gBAAgB,YAAY,8BAA8B,QAAQ,2BAA2B;EAC7F,oBACE,YAAY,uBACZ,SAAS,YAAY,2CACrB,uBACG,QAAQ,kCAAkC;EAC/C,sBAAsB,2BAA2B;EACjD,yBAAyB,iBAAiB,QAAQ,2BAA2B;;iBAG/D,8BAA8B,SAAS,iCAAiC;;;UC5BvE;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW;;UAGI;EACf,aAAa;EACb;EACA;;KAGU;EACN;EAAc;EAAgB;EAAkB,WAAW;;EAC3D;EAA6B;EAAgB,UAAU;EAA4B,WAAW;;EAC9F;EAAkB;EAAgB;EAAe,WAAW;;UAEjD;EACf,qBAAqB,eAAe,SAAS,8BAA8B,QAAQ,2BAA2B;;UAG/F,sCAAsC;EACrD,KAAK;;iBAGS,mCAAmC;EACjD;EACA;EACA;EACA;EACA;EACA,WAAW;EACX;IACE;iBAgBY,8BACd,UAAU,+BACV,UAAS,iDACR;iBAWa,sCACd,UAAU,+BACV,UAAS;iBA8BK,yBAAyB,UAAU,gCAAgC,KAAK;EAAsD;;iBAS9H,iBAAiB,YAAY,wBAAwB;iBAOrD,2BAA2B,QAAQ,0BAA0B;iBA0BvD,8BACpB,UAAU,+BACV,SAAS,gCACR,QAAQ;cAiBE;mBACM;EAEjB,YAAY,SAAS;EAIrB,SAAS,UAAU,gCAAgC,QAAQ;;;;UC3K5C;EACf;EACA;EACA;EACA,WAAW;EACX,OAAO;EACP;EACA,YAAY;EACZ,cAAc;;UAGC;EACf;EACA;EACA;IAAS;;EACT,QAAQ,eAAe,eAAe;;UAGvB;EACf;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,MAAM;EACjB;;UAGe;EACf;EACA;EACA;EACA;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;IACE;IACA;IACA;IACA;;;UAIa;EACf,OAAO;;iBAKO,uBAAuB,UAAU,iBAAiB,SAAS,uBAAuB;iBAwBlF,uBAAuB,YAAY,wBAAwB,SAAS,uBAAuB;iBAc3F,mBAAmB,SAAS,YAAY,SAAS,uBAAuB;;;UCrFvE;EACf;EACA,MAAM,QAAQ;EACd,oBAAoB,QAAQ,yBAAyB;EACrD,aAAa,SAAS,qBAAqB,QAAQ,mBAAmB;EACtE,gBAAgB,SAAS,wBAAwB,QAAQ,yBAAyB;EAClF,gBAAgB,YAAY,uBAAuB,SAAS,6BAA6B,QAAQ,2BAA2B;EAC5H;EACA,YAAY;;UAGG;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,UAAU;EACV,WAAW;EACX,WAAW;;UAGI;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,YAAY;EACZ;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,YAAY;EACZ;;iBAGc,6BAA6B,SAAS,gCAAgC;iBAkCtE,wBACd,SAAS,uBACT;EAAW;EAAoB,cAAc;IAC5C;;;UC9Fc;EACf;EACA;EACA;EACA;EACA;EACA,UAAU;EACV,MAAM;EACN,aAAa;EACb;EACA,SAAS;IACP;IACA;IACA,MAAM;IACN;;EAEF,UAAU;IACR;IACA;IACA;;EAEF;IACE;IACA;IACA;;;UAIa;EACf;EACA;EACA;EACA;EACA;EACA;;iBASc,kCAAkC;iBAUlC,4BAA4B;EAC1C;EACA;EACA;IACO;;;UC/DQ;EACf,WAAW;EACX,cAAc,eAAe;EAC7B,mBAAmB;;cAGR,wBAAwB,eAAe;iBAoGpC,wBAAwB,aAAa;;;UC7FpC;EACf,YAAY;EACZ,SAAS;EACT,WAAW;EACX,cAAc;EACd;IACE;IACA;IACA;IACA;IACA;;;UAIa;EACf;EACA,aAAa;EACb,aAAa,SAAS,qBAAqB,QAAQ,mBAAmB;EACtE,gBAAgB,SAAS,wBAAwB,QAAQ,yBAAyB;EAClF,gBAAgB,YAAY,mCAAmC,QAAQ,2BAA2B;;iBAGpF,mCAAmC,SAAS,sCAAsC;;;UC1BjF;EACf;EACA;EACA;EACA,mBAAmB;;UAGJ;EACf;EACA;EACA;IACE;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,iBAAiB;IACjB,iBAAiB;;EAEnB;IACE;IACA;IACA;IACA;;EAEF;;cAGW;iBAQG,oCAAoC;iBAM9B,iCACpB,UAAS,qCACR,QAAQ;;;cC9BE;cACA;KAED;KACA;UAEK;EACf;EACA;EACA;EACA,UAAU;EACV,MAAM;EACN,aAAa;EACb;EACA,SAAS;IACP;IACA;IACA,MAAM;IACN;;EAEF,UAAU;IACR;IACA;IACA;;;UAIa;EACf;EACA;EACA;EACA,UAAU;EACV,MAAM;EACN,YAAY,YAAY;EACxB,SAAS;IACP;IACA;IACA,MAAM;IACN;;EAEF,UAAU;IACR;IACA;IACA;;EAEF;IACE,MAAM;IACN;IACA;;EAEF,QAAQ;EACR;IACE;IACA;IACA;IACA;IACA;IACA;;;UAIa;EACf;EACA;EACA;EACA,yBAAyB;;UAGV;EACf;EACA;EACA;EACA,cAAc;EACd;IACE;IACA;IACA,sBAAsB;;;UAIT;EACf,YAAY;EACZ,SAAS;EACT,WAAW;EACX,cAAc;EACd;IACE;IACA;IACA;IACA;IACA;;;UAIa;EACf,YAAY;EACZ,WAAW;EACX,cAAc;EACd,SAAS,YAAY;EACrB;EACA;IACE;IACA;IACA;IACA;IACA;;;UAIa;EACf;EACA,aAAa;EACb,aAAa,SAAS,qBAAqB,QAAQ,mBAAmB;EACtE,gBAAgB,SAAS,wBAAwB,QAAQ,yBAAyB;EAClF,gBAAgB,YAAY,oCAAoC,QAAQ,2BAA2B;EACnG,oBAAoB,YAAY,mCAAmC,QAAQ,kCAAkC;EAC7G,sBAAsB,2BAA2B;EACjD,yBAAyB,iBAAiB,QAAQ,2BAA2B;;KAGnE,2CAA2C;UAEtC;EACf;EACA;EACA;IACE;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,iBAAiB,QAAQ,kBAAkB;IAC3C,iBAAiB,QAAQ,kBAAkB;;EAE7C;IACE;IACA;IACA;IACA;;EAEF;;iBAGc;iBAYA,uCAAuC;iBAIvC,kCAAkC;iBAwClC,+CAA+C;EAC7D;EACA;EACA;;iBAac,yCACd,UAAS,6CACR;iBAuBa,yCAAyC;EACvD;EACA;;iBAac,wCAAwC;EACtD;EACA;EACA;IACO;iBAQO,oCAAoC,SAAS,uCAAAA;cAgEhD,0CAAiC;iBAExB,uCACpB,UAAS,2CACR,QAAQ;;;;cCpXE,0BAA0B,SAAS;iBAwBhC,yBAAyB;;;cCuB5B,mCAAmC;mBAC7B;EAEjB,IAAI,uBAAuB;EAI3B,IAAI,YAAY;EAIhB,YAAY,OAAO,mBAAmB;EAMtC,OAAO;;iBAMO,mBAAmB,YAAY,wBAAwB;iBAiBvD,8BAA8B;EAC5C;EACA,aAAa;EACb,YAAY,YAAY,uBAAuB,SAAS,6BAA6B,0BAA0B,QAAQ;IAChH;iBAsDO,8BAA8B,SAAS,iCAAiC;;;KC/E5E;EAEN;;EAEA;;;;EAIA;;EAGA;;EAEA;;UAGW;;;EAGf;;EAEA,MAAM;;EAEN;;EAEA,mBAAmB;;EAEnB;;;EAGA;;;;;;EAMA,cAAc;;UAGC;EACf,UAAU;IACR;IACA;IACA,UAAU;IACV;MACE;;;;;;cAOO,mCAAmC;WACrC;;WAEA;;;WAGA;;WAEA;;WAEA;EAET,YAAY;IACV;IACA;IACA;IACA;IACA;;;UAUa;;EAEf;EACA,UAAU;;EAEV;;UAGe;;EAEf;;EAEA,SAAS;EACT,UAAU;EACV,WAAW;;UAGI;;EAEf;;EAEA,UAAU;;UAGK;;EAEf;;EAEA,SAAS;;EAET;;EAEA;EACA,UAAU;;EAEV;;UAGe;EACf,QAAQ;;;EAGR,KAAK;;UAGU;;EAEf;;EAEA;;EAEA,OAAO;EACP;EACA;;UAGe;;EAEf;;EAEA,aAAa;;EAEb,YAAY;;;;;;cAOD;mBACM;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;EAEjB,YAAY,SAAS;;;;;;;EAuCf,gBAAgB,OAAO,uBAAuB,QAAQ;;;;;;EAetD,eAAe,OAAO,sBAAsB,QAAQ;;;;EAyCpD,aAAa,OAAO,oBAAoB,QAAQ;;EAgBhD,WAAW,OAAO,kBAAkB,QAAQ;;;;EAgB5C,qBAAqB,OAAO,4BAA4B,QAAQ;;EAgBhE,gBAAgB;IAAS;MAAmB,QAAQ;UAUlD;UAaM;;iBAkGA,2BACd,SAAS,8BACR"}

package/dist/consumer.d.ts

@@ -1,2 +1,2 @@
-import { a as IntegrationHubAuth, c as IntegrationHubRequestError, d as MintCapabilityBundleInput, f as ResolveManifestInput, i as CreateGrantsInput, l as IntegrationOwnerPolicy, n as CheckConnectorInput, o as IntegrationHubClient, p as createIntegrationHubClient, r as CheckConnectorResult, s as IntegrationHubClientOptions, t as CapabilityBundleResult, u as ListGrantsInput } from "./consumer-BC6pCUzI.js";
+import { a as IntegrationHubAuth, c as IntegrationHubRequestError, d as MintCapabilityBundleInput, f as ResolveManifestInput, i as CreateGrantsInput, l as IntegrationOwnerPolicy, n as CheckConnectorInput, o as IntegrationHubClient, p as createIntegrationHubClient, r as CheckConnectorResult, s as IntegrationHubClientOptions, t as CapabilityBundleResult, u as ListGrantsInput } from "./consumer-zHtoJixe.js";
 export { CapabilityBundleResult, CheckConnectorInput, CheckConnectorResult, CreateGrantsInput, IntegrationHubAuth, IntegrationHubClient, IntegrationHubClientOptions, IntegrationHubRequestError, IntegrationOwnerPolicy, ListGrantsInput, MintCapabilityBundleInput, ResolveManifestInput, createIntegrationHubClient };

package/dist/hub-0Od2lgun.d.ts

@@ -0,0 +1,38 @@
+import { A as IntegrationTriggerSubscription, F as StartAuthRequest, I as StartAuthResult, M as IssueCapabilityRequest, N as IssuedIntegrationCapability, a as IntegrationActionResult, b as IntegrationHubOptions, d as IntegrationConnection, j as InvokeWithCapabilityRequest, l as IntegrationCapability, p as IntegrationConnector, s as IntegrationActor, t as CompleteAuthRequest } from "./core-types-LLZ7aRGv.js";
+import { n as IntegrationRegistry, t as ComposeIntegrationRegistryOptions } from "./registry-core-DskHDk7Y.js";
+//#region src/hub.d.ts
+declare class IntegrationHub {
+  private readonly providers;
+  private readonly store;
+  private readonly capabilitySecret;
+  private readonly guard;
+  private readonly policy;
+  /** Host-injected (or in-memory default) secret store. The hub re-persists
+   *  rotated credentials here when a connection carries a secretRef. */
+  readonly secretStore: IntegrationHubOptions['secretStore'];
+  private readonly oauthStateStore;
+  private readonly oauthStateTtlMs;
+  private readonly credentialsRotated;
+  private readonly now;
+  constructor(options: IntegrationHubOptions);
+  listConnectors(): Promise<IntegrationConnector[]>;
+  listRegistry(options?: ComposeIntegrationRegistryOptions): Promise<IntegrationRegistry>;
+  startAuth(providerId: string, request: StartAuthRequest): Promise<StartAuthResult>;
+  completeAuth(providerId: string, request: CompleteAuthRequest): Promise<IntegrationConnection>;
+  upsertConnection(connection: IntegrationConnection): Promise<IntegrationConnection>;
+  listConnections(owner: IntegrationActor): Promise<IntegrationConnection[]>;
+  getConnection(connectionId: string): Promise<IntegrationConnection | undefined>;
+  issueCapability(request: IssueCapabilityRequest): Promise<IssuedIntegrationCapability>;
+  verifyCapability(token: string): IntegrationCapability;
+  invokeWithCapability(token: string, request: InvokeWithCapabilityRequest): Promise<IntegrationActionResult>;
+  subscribeTrigger(connectionId: string, trigger: string, targetUrl?: string): Promise<IntegrationTriggerSubscription>;
+  private requireProvider;
+  private requireConnector;
+  private requireConnection;
+  private assertConnectionActive;
+}
+declare function signCapability(capability: IntegrationCapability, secret: string): string;
+declare function verifyCapabilityToken(token: string, secret: string): IntegrationCapability;
+//#endregion
+export { signCapability as n, verifyCapabilityToken as r, IntegrationHub as t };
+//# sourceMappingURL=hub-0Od2lgun.d.ts.map

package/dist/hub-0Od2lgun.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-0Od2lgun.d.ts","names":[],"sources":["../src/hub.ts"],"mappings":";;;cAkCa;mBACM;mBACA;mBACA;mBACA;mBACA;;;WAGR,aAAa;mBACL;mBACA;mBACA;mBACA;EAEjB,YAAY,SAAS;EAgBf,kBAAkB,QAAQ;EAK1B,aAAa,UAAS,oCAAyC,QAAQ;EAQvE,UAAU,oBAAoB,SAAS,mBAAmB,QAAQ;EAyBlE,aAAa,oBAAoB,SAAS,sBAAsB,QAAQ;EA6BxE,iBAAiB,YAAY,wBAAwB,QAAQ;EAK7D,gBAAgB,OAAO,mBAAmB,QAAQ;EAIlD,cAAc,uBAAuB,QAAQ;EAI7C,gBAAgB,SAAS,yBAAyB,QAAQ;EAkBhE,iBAAiB,gBAAgB;EAQ3B,qBAAqB,eAAe,SAAS,8BAA8B,QAAQ;EAyCnF,iBAAiB,sBAAsB,iBAAiB,qBAAqB,QAAQ;UAcnF;UAMM;UAMA;UAMN;;iBAWM,eAAe,YAAY,uBAAuB;iBAMlD,sBAAsB,eAAe,iBAAiB"}